MAL-2023-1143 Malicious code in compositionupdate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 609e73b696d2a84c8c2169afde78694231815b46be300710ddf913fed7c63d1b The OpenSSF Package Analysis project identified 'compositionupdate' @ 88.8.8 npm as malicious. It is considered malicious because: - The package...

Malicious code in jumflot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2b7764ac6e0cb875ae612312777e2ed2f47bb86a2e396b8af0690670671f51db The OpenSSF Package Analysis project identified 'jumflot' @ 99.99.99 npm as malicious. It is considered malicious because: - The package...

Malicious code in sovrin-networks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b31e1dcc001e433d6e7aeca9f5f73e1934a3813dc3225fc622622f26a2a0c0a1 The OpenSSF Package Analysis project identified 'sovrin-networks' @ 99.99.99 npm as malicious. It is considered malicious because: - The package...

Malicious code in eslint-plugin-indeed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cd3cf0dfdda3ea0bf705d385efb05c56b971a408c4a0dceef3771d2e474a33e0 The OpenSSF Package Analysis project identified 'eslint-plugin-indeed' @ 99.99.9 npm as malicious. It is considered malicious because: - The...

MAL-2023-5 Malicious code in eslint-plugin-indeed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cd3cf0dfdda3ea0bf705d385efb05c56b971a408c4a0dceef3771d2e474a33e0 The OpenSSF Package Analysis project identified 'eslint-plugin-indeed' @ 99.99.9 npm as malicious. It is considered malicious because: - The...

Malicious code in skyscanner-themes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e80c6a572898c77cc6e5b4c0266cc4805778ec35102f514669accd32b0664f0 The OpenSSF Package Analysis project identified 'skyscanner-themes' @ 5.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in zsbpwebsdktest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 347bc418b55e9092cd6a48ff3f93f328085fa2c4192ba6dc2c5cf062c3d10c20 The OpenSSF Package Analysis project identified 'zsbpwebsdktest' @ 9999.99.91 npm as malicious. It is considered malicious because: - The packag...

MAL-2023-1155 Malicious code in dist-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ff355bd5f2422ce630aeb0652869d4bdaa8f3f18cf576fc60a76588f3acf36b4 The OpenSSF Package Analysis project identified 'dist-web' @ 99.1.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in commentrating (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 87db588ebd8e7a42cbbbbf7fc21caa36fc553172a0ff4c4e9a58ce9354d62e7f The OpenSSF Package Analysis project identified 'commentrating' @ 99.9.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1142 Malicious code in commentrating (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 87db588ebd8e7a42cbbbbf7fc21caa36fc553172a0ff4c4e9a58ce9354d62e7f The OpenSSF Package Analysis project identified 'commentrating' @ 99.9.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1278 Malicious code in rb-notification-banner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis faed09cda269c58908aa898798259bd292fcce98a8f5a60f486a4c26bb84d15a The OpenSSF Package Analysis project identified 'rb-notification-banner' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1290 Malicious code in scuid-x (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0f81b2e690e5ecaa536cc321727566547b6adc4baa770b6b4c7666e29e262e83 The OpenSSF Package Analysis project identified 'scuid-x' @ 1.0.3 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2023-1291 Malicious code in scuntest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f42cc62b8cee0d48d9ee1455debbb923baaab65c1fd45a70a726d6053cb36086 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1180 Malicious code in falsepositivecheck6969 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cef392714b654bd14df8ba24c491e8844b54e08fee392bff62632f7f3e5d6fa1 The OpenSSF Package Analysis project identified 'falsepositivecheck6969' @ 9999.9.9 npm as malicious. It is considered malicious because: - The...

Malicious code in falsepositivecheck6969 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cef392714b654bd14df8ba24c491e8844b54e08fee392bff62632f7f3e5d6fa1 The OpenSSF Package Analysis project identified 'falsepositivecheck6969' @ 9999.9.9 npm as malicious. It is considered malicious because: - The...

MAL-2023-1163 Malicious code in donuts.node-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b8d6fee5827de9688cc9b83812dc32e54e33531a0bd2fd179dc3e2935564dc7 The OpenSSF Package Analysis project identified 'donuts.node-build' @ 99.99.104 npm as malicious. It is considered malicious because: - The...

Malicious code in thisisjustfortesting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 59cdc01afa05cd90c8814ecd8dd94f555b32681004eabf13194d1f7b6c52d4f9 The OpenSSF Package Analysis project identified 'thisisjustfortesting' @ 1.0.2 npm as malicious. It is considered malicious because: - The packa...

MAL-2023-1161 Malicious code in documentation-ably-realtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3f6bf5586a7addf25073456bb7b754dafa5c124cc264cb37b2005088598555ee The OpenSSF Package Analysis project identified 'documentation-ably-realtime' @ 1.0.2 npm as malicious. It is considered malicious because: - Th...

MAL-2023-1228 Malicious code in links-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 870f8306aa2e95828fa2fdd771044248f7d5e8e715304b6818773620e5c7a1b2 The OpenSSF Package Analysis project identified 'links-3' @ 9.0.1 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2023-1422 Malicious code in yc-as-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9df89f5f0260f38e93635cc5df99e7ea267d4c07f25e1446a49c08fdf21befe7 The OpenSSF Package Analysis project identified 'yc-as-client' @ 11.11.3 pypi as malicious. It is considered malicious because: - The package...