MAL-2023-270 Malicious code in doks-child-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 402865140408df564c64110cbb63271f62bb71a0fb29453688fa1f876accc457 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in angular-mep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 681355ff3db8d03fa0216e4ff152cb0be7e3cd485423c68fc2d3b33c8feae3a5 The OpenSSF Package Analysis project identified 'angular-mep' @ 1.3.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in mfe-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 976982bf72cee0087094ae0b3d8c7b6bfd8e5efd18fb3efa3f192b175f6df360 The OpenSSF Package Analysis project identified 'mfe-test-utils' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1235 Malicious code in mfe-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 976982bf72cee0087094ae0b3d8c7b6bfd8e5efd18fb3efa3f192b175f6df360 The OpenSSF Package Analysis project identified 'mfe-test-utils' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in workfront-typescript-definitions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8f6635deb487ad3ada4485d2a185c815895af90e8a87da476ce19f4c37ef0d1f The OpenSSF Package Analysis project identified 'workfront-typescript-definitions' @ 1.1.1 npm as malicious. It is considered malicious because:...

Malicious code in ent-memberassistance-helppopup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 617211f3573ab14bc57da3efe5ce49c8ed667e590c643d1a62fbe680ab531b48 The OpenSSF Package Analysis project identified 'ent-memberassistance-helppopup' @ 1.0.0 npm as malicious. It is considered malicious because: -...

MAL-2023-1330 Malicious code in usaa-combobox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e892dcf4e3ded1dbf0fcc40f606985a800f80c2d34bc734649a22cec7256fe4 The OpenSSF Package Analysis project identified 'usaa-combobox' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in usaa-pagination (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0d9fe4420ea18c84929d5f69ae4aee3195444c279f3e9a7653bf5e6b992723a The OpenSSF Package Analysis project identified 'usaa-pagination' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in usaa-cards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1487cc16acdec63072223cdd8fe5b4764fdd85ef995ed1650dc2c5eb5c9e4fbc The OpenSSF Package Analysis project identified 'usaa-cards' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1329 Malicious code in usaa-cards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1487cc16acdec63072223cdd8fe5b4764fdd85ef995ed1650dc2c5eb5c9e4fbc The OpenSSF Package Analysis project identified 'usaa-cards' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1132 Malicious code in chain00x_tsrc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5926bd93f4ff900c16d517fa3e4dc243e5a29e79d3fb377b8304df57ab6d347e The OpenSSF Package Analysis project identified 'chain00xtsrc' @ 1.0.5 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1131 Malicious code in chain00x_rce1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2d528fd659506ce3a370f146632641af04a4a41e0c1b4d0e148e48a2b57e8b40 The OpenSSF Package Analysis project identified 'chain00xrce1' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1133 Malicious code in chain00xtest2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 80e4a9d4552592ce0f6795c5766700fad9ffb00693e9e153665354e7f4286917 The OpenSSF Package Analysis project identified 'chain00xtest2' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

MAL-2023-296 Malicious code in dvknpm-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 699740896647f6c3926d3579cb62aaf2d4cb804f000f96f4ad3d049f5c176b13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1175 Malicious code in eslint-config-mirakl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0a25468bc92620eecf8b46085022ddaa259cf5b4ef94bb98423249eeba1e308 The OpenSSF Package Analysis project identified 'eslint-config-mirakl' @ 22.5.15 npm as malicious. It is considered malicious because: - The...

Malicious code in cdp-ops--ts-accesslog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3f91b885ec95bb15b4a6f58f71cccba8ac7528ef5c5bcae18f34f74e27f0f444 The OpenSSF Package Analysis project identified 'cdp-ops--ts-accesslog' @ 1.4.3 npm as malicious. It is considered malicious because: - The...

MAL-2023-1130 Malicious code in cdp-ops--ts-accesslog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3f91b885ec95bb15b4a6f58f71cccba8ac7528ef5c5bcae18f34f74e27f0f444 The OpenSSF Package Analysis project identified 'cdp-ops--ts-accesslog' @ 1.4.3 npm as malicious. It is considered malicious because: - The...

Malicious code in snew-classic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0ac296eeaba98c7d28c3be79bec7f5ca26b13e1b576956695d24f12d232f7c89 The OpenSSF Package Analysis project identified 'snew-classic-ui' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in dragonconnect-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 20e247592dd8735f170e77329b3ef9ae7fa59a57437134b4e0e501cc3a395531 The OpenSSF Package Analysis project identified 'dragonconnect-config' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...

MAL-2023-1179 Malicious code in fabric-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 95e54d11b0e8b8ae3ec65bb015b953544d6e1b0e8e8d5ac3ebe884d858528d42 The OpenSSF Package Analysis project identified 'fabric-integration' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...