Malicious code in lyft-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcdf3711c3a60bf5a37d61a0b61ff485f47ea89580e09542881d51f6192ff73d The OpenSSF Package Analysis project identified 'lyft-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-543 Malicious code in lyft-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcdf3711c3a60bf5a37d61a0b61ff485f47ea89580e09542881d51f6192ff73d The OpenSSF Package Analysis project identified 'lyft-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in linkedin-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2f45dd8de7c9dfbf4be3b1eb3b9ba6589946428e21d51e9d4da84804e129b9b5 The OpenSSF Package Analysis project identified 'linkedin-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-519 Malicious code in linkedin-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2f45dd8de7c9dfbf4be3b1eb3b9ba6589946428e21d51e9d4da84804e129b9b5 The OpenSSF Package Analysis project identified 'linkedin-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-508 Malicious code in instacart-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9148e4ef72801be1e6f194388e391e2788a1b821aaa108c28f4a832a833f9893 The OpenSSF Package Analysis project identified 'instacart-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in google-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e867afe3fa68230265b07bb6a6218770a62be2ff3a53c35395224bbb2b6be9c3 The OpenSSF Package Analysis project identified 'google-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-481 Malicious code in google-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e867afe3fa68230265b07bb6a6218770a62be2ff3a53c35395224bbb2b6be9c3 The OpenSSF Package Analysis project identified 'google-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in godaddy-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6e3e78c314bba5e60254ba13cbb65a58a2d4c0f88a9ea6a5b62cde08027bd2bb The OpenSSF Package Analysis project identified 'godaddy-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-477 Malicious code in godaddy-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6e3e78c314bba5e60254ba13cbb65a58a2d4c0f88a9ea6a5b62cde08027bd2bb The OpenSSF Package Analysis project identified 'godaddy-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in epicagames-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c33c517ccf715e4f610939332c3137b5abb5a7fbd5c82bac72bf051316389738 The OpenSSF Package Analysis project identified 'epicagames-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-455 Malicious code in epicagames-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c33c517ccf715e4f610939332c3137b5abb5a7fbd5c82bac72bf051316389738 The OpenSSF Package Analysis project identified 'epicagames-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in dropbox-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9caae36a2824571fd25ea7bbd865ce6077410002b5011e825d2877095d171a40 The OpenSSF Package Analysis project identified 'dropbox-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-441 Malicious code in dropbox-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9caae36a2824571fd25ea7bbd865ce6077410002b5011e825d2877095d171a40 The OpenSSF Package Analysis project identified 'dropbox-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in bookingcom-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis daa10c6e26b36376e95bf32b05ebdc3b9ae021c1c41f944998eea0ee08e626e5 The OpenSSF Package Analysis project identified 'bookingcom-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in arcus-cmd-utils (npm)

This package executes a base64-encoded script to download an Electron-based infostealer binary, aimed at exfiltrating cryptocurrency wallets, credentials, and other sensitive data. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware...

MAL-2025-360 Malicious code in arcus-cmd-utils (npm)

This package executes a base64-encoded script to download an Electron-based infostealer binary, aimed at exfiltrating cryptocurrency wallets, credentials, and other sensitive data. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware...

Malicious code in chrome-api-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 945a0a50710064ba2531f6b43681d86f70f1abe054cbb593386e63f921369750 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-171 Malicious code in chrome-api-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 945a0a50710064ba2531f6b43681d86f70f1abe054cbb593386e63f921369750 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

cron-utils:CronParserFuzzer: Security exception in java.base/java.util.Arrays.copyOf

Detailed Report: https://oss-fuzz.com/testcase?key=5103060199735296 Project: cron-utils Fuzzing Engine: libFuzzer Fuzz Target: CronParserFuzzer Job Type: libfuzzerasancron-utils Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.util.Arrays.copyOf...

MAL-2025-80 Malicious code in controller-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34e748f33e1982598d357d378cb8b42a4361f9a056afdd2c66b16586e034fe41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...