MAL-2023-1218 Malicious code in jest-cucumber-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e2fbf023b3a861ceda4ee89f2c188d2cf7e1b274a07fb7f0df58b9d86c6935b2 The OpenSSF Package Analysis project identified 'jest-cucumber-reporter' @ 0.0.9 npm as malicious. It is considered malicious because: - The...

Malicious code in puppet-module-posix-system-r (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2ad3a13f7c087320a9f4bf76203fd40172a2b55172dec3ac957ad4d265c01425 The OpenSSF Package Analysis project identified 'puppet-module-posix-system-r' @ 1.0.0 rubygems as malicious. It is considered malicious because...

Malicious code in @tendable/ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 530df54e3b7520850cd182b11fa3bb60f72e996b941a80467c006de084372f29 The OpenSSF Package Analysis project identified '@tendable/ui-kit' @ 99.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1092 Malicious code in @n9xcnr5test/n9xcnr5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 98235bbf40ea66c28973775cba8ead37bb4dc1d8999e5ebf02eb3157d4ba74be The OpenSSF Package Analysis project identified '@n9xcnr5test/n9xcnr5' @ 2001.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1325 Malicious code in twodc-visualizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a8320b928ec8230835a771ef3d18a7751bbf07d1ea39585419f48e7d5c41a9cd The OpenSSF Package Analysis project identified 'twodc-visualizer' @ 1.6.3 npm as malicious. It is considered malicious because: - The package...

Malicious code in auto-assign-team-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4d5eebeeaf5ef87c0a419e6e3716aa1a1046926c3d90905b645d03a46be860b0 The OpenSSF Package Analysis project identified 'auto-assign-team-action' @ 2000.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1117 Malicious code in auto-assign-team-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4d5eebeeaf5ef87c0a419e6e3716aa1a1046926c3d90905b645d03a46be860b0 The OpenSSF Package Analysis project identified 'auto-assign-team-action' @ 2000.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1042 Malicious code in yatai-web-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f548d205122fcfcec01de022463ec287546b7367481a1ec5adb29294e452b8f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1082 Malicious code in @ikea-aoa/component-price-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7f7e0211ea2009802ec566e645d03e557dda0a2f62f2546df574ab757ab095d2 The OpenSSF Package Analysis project identified '@ikea-aoa/component-price-module' @ 99.0.1 npm as malicious. It is considered malicious because...

Malicious code in aws-sdk-js-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e64c49f08b91cb456113ae44bbd8efc8280a1c79aa45ca1bd0f019c4af6ad873 The OpenSSF Package Analysis project identified 'aws-sdk-js-v3' @ 1.3.7 npm as malicious. It is considered malicious because: - The package...

Malicious code in dell-microapp-core-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa05756266fe398bd9fa57a82b4d066270cdc60a00a4cda44b8eaa9552e2d56f The OpenSSF Package Analysis project identified 'dell-microapp-core-ng' @ 2000.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1151 Malicious code in dell-microapp-core-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa05756266fe398bd9fa57a82b4d066270cdc60a00a4cda44b8eaa9552e2d56f The OpenSSF Package Analysis project identified 'dell-microapp-core-ng' @ 2000.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1188 Malicious code in gp-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0af07f18bec84cba6878dd345ea1281728e0257d285118a40d835d7c9a2985a6 The OpenSSF Package Analysis project identified 'gp-actions' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in tecno-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 031d3e0a1576d7fedc52920ce24b349bbcefa4fc7c381855f1bcbdc0b82a4dd6 The OpenSSF Package Analysis project identified 'tecno-new' @ 1.1.2 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1314 Malicious code in tecno-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 031d3e0a1576d7fedc52920ce24b349bbcefa4fc7c381855f1bcbdc0b82a4dd6 The OpenSSF Package Analysis project identified 'tecno-new' @ 1.1.2 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1164 Malicious code in dox_assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f1c48c355e0ca22767468dec0d14be75c769e6b77c12e7c1a7989c0c6a487287 The OpenSSF Package Analysis project identified 'doxassets' @ 999.99.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1192 Malicious code in grizzly_sql_graph_visualization (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 98b80123b8320ae78359836efd59f32caab21e7efffea59f91bfb61b947bbab9 The OpenSSF Package Analysis project identified 'grizzlysqlgraphvisualization' @ 0.2.3 npm as malicious. It is considered malicious because: - T...

Malicious code in some_internal_package_for_testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 53107273160f2452143bcbee916077e6adbca0f10d5f2d80e0afeb276d92d788 The OpenSSF Package Analysis project identified 'someinternalpackagefortesting' @ 99.9.9 npm as malicious. It is considered malicious because: -...

Malicious code in wrangler-dev-api-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 61404905188d42181fbf3217b2ebffe91c1328a0cd469718a53faec95f244738 The OpenSSF Package Analysis project identified 'wrangler-dev-api-app' @ 24.12.47 npm as malicious. It is considered malicious because: - The...

MAL-2023-1347 Malicious code in wrangler-dev-api-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 61404905188d42181fbf3217b2ebffe91c1328a0cd469718a53faec95f244738 The OpenSSF Package Analysis project identified 'wrangler-dev-api-app' @ 24.12.47 npm as malicious. It is considered malicious because: - The...