MAL-2024-1386 Malicious code in tec-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 125ddb22e15354e2319586116faa892343d4a86c8f79c9d6ed274d9acfb5f20d The OpenSSF Package Analysis project identified 'tec-docs' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1366 Malicious code in sigoner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2b7a5f58464c5193c5d937ef7dd00a42fa46a5b30ad2dd711d05cb143ca5132 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1355 Malicious code in @content-platform/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8483b2f250f1824837729cc5bf8f6fa9fe76e44cc5c0e9352b1112c8c83cd0db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1334 Malicious code in multiconnections (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d080fb698cec14d7c79b82bff9f6ca58764dbfcd5b487ea88e5822e59e1d74cb The OpenSSF Package Analysis project identified 'multiconnections' @ 2.34.23 pypi as malicious. It is considered malicious because: - The packag...

MAL-2024-1330 Malicious code in elk-uikit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aaece47ca73a2646b0cb728b7816026ec3135f48e18054950dce89f8bf9073b0 The OpenSSF Package Analysis project identified 'elk-uikit' @ 99.99.1 npm as malicious. It is considered malicious because: - The package execut...

MAL-2024-1292 Malicious code in sid-client-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 271bfa6075e1282de1c0d5269d79377fe6b16e9d60fa41a2a6a070cb97795905 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1161 Malicious code in galileo-web-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1ea1d3425cddab091828432f9dffef7f8bc36f5fbf9bcd0e01dffe737417e92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1160 Malicious code in xko2x (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9088a22cb637f620235729c3503e7ab8b9a11fb9469c5742b88fbcfd32be15dd The OpenSSF Package Analysis project identified 'xko2x' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2024-1104 Malicious code in lyft-exceptions (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5e0290aaa0cb90a501cb0a0b357f32d3e725f6f3a97541cbc2796671ea4e8f60 The OpenSSF Package Analysis project identified 'lyft-exceptions' @ 5.9.1 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-1091 Malicious code in udp-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0339bd7712cdbec458d820fe33388f955c5fdd4fb38e14e3fad8b2f6f4313d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1064 Malicious code in pet-profile-micro-interaction (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd98e11aca525f441300cc29d3cebd96d52cee8d8620e951a805b48fe9305d33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1030 Malicious code in node-red-contrib-object-to-array (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc617e826788805ca870b385151ace964f43893d9560c8b2d9615276520929a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1005 Malicious code in ts-patch-mongose (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51bc93e8c8d28afed9e08e35605df0343e47bb7e02ccd33e5f7cb1f56c7099ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-366 Malicious code in wlwz-2312-2107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4e0473238cfdc7e52ebe6ae11e6dc9575d8ca45278ee0fcea1fd6d19420a783 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-357 Malicious code in wlwz-2312-2007 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b061f393282c6760e5ec89c8ee1f7b0bff5e6bbc14ebc698ffdc8317ee7aecb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-138 Malicious code in cagov-template-v5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 041aa485b2de4fd90575bf3656a8dee0ce0c0a4319b0919b62d35f6b98b090c6 The OpenSSF Package Analysis project identified 'cagov-template-v5' @ 19.2.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-71 Malicious code in cordova-plugin-canvas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c72f98238b951534c1437dc8a7c3ee8ab8463beb50c44c59d07cccdd15829386 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-33 Malicious code in d5-es6-sass-boilerplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3090df994b516cfc30ee58cc5871282f61ebc4e378a73744fb779705e16a1a35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-23 Malicious code in snapfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 243c20cf789fbcfb3e3ba11a25b91aef2e8dfb1498fec76a215c1d04b1265343 The OpenSSF Package Analysis project identified 'snapfish' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-6 Malicious code in @skip-js/cookie-consent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5576fae3b0649b388c1eb920f54ed752672ecdd3558a0988c30504346de5f0c2 The OpenSSF Package Analysis project identified '@skip-js/cookie-consent' @ 0.8.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-11 Malicious code in @serenity-web/channel-motor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2e1f63ab01642f5ad7bc933a823db954af9d0880bc4ef256f32077a9b89b714 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8713 Malicious code in @diil-front/chip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74f3f685f9f7080b81701a037923a9621b51fbafb68a17e12d9ceffd47981a0a The OpenSSF Package Analysis project identified '@diil-front/chip' @ 99.99.99 npm as malicious. It is considered malicious because: - The packag...

MAL-2023-8694 Malicious code in twk-boilerplate-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e55b9fb271d1d1fcc3ac27783bc95ed7cbce8762d35cd7f2635490e25b9263b The OpenSSF Package Analysis project identified 'twk-boilerplate-template' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2023-8693 Malicious code in katal-sellercentralhmdsupport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8cdaad58325a54ebb6ba494e3d88fa6051937fe7092ef20c1f13db2c3fc8de54 The OpenSSF Package Analysis project identified 'katal-sellercentralhmdsupport' @ 70.0.0 npm as malicious. It is considered malicious because: -...

MAL-2023-8629 Malicious code in lc-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d918d66169ac2696569bb389d82b0b95640986fdc77ab8cec9639908d156d0c5 The OpenSSF Package Analysis project identified 'lc-config' @ 5.5.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8550 Malicious code in ory-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97e67d3893cb4ea477e80d85d47524af218e6579c6e04ed4037580b05b45060d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8489 Malicious code in one-host-remote-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c1701ddae4f18ae98068db0679d932010b9908128879e61b3d39f67afeb48dc The OpenSSF Package Analysis project identified 'one-host-remote-module' @ 3.3.3 npm as malicious. It is considered malicious because: - The...

MAL-2023-8370 Malicious code in tencent-cloud-python-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security bf236cca18e4d157a57cd3de7abed8ad967103c42b9ae53f5026174af46b64a4 Attack targeted at users of Alibaba, AWS and Telegram via malicious packages published to PyPI. The malicious code was hidden in strategic...

MAL-2023-8333 Malicious code in @dsr-rollback-org-hover-owled-agios-situs/dsr-rollback-package-hover-owled-agios-situs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45cfaa8e8c857c3d794bba3095a010e4210da4d46a216b4a5bb3b9e155a8e5f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8344 Malicious code in situs-bandar-togel-hadiah-4d-10-juta-terpercaya-hk-sgp-sdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 476c626f92379b4df2800baa59991b278c3f33426ff69fbd12afb29821810430 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8298 Malicious code in shopify-currency-converter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cce5f47f0fb8050c5ba0e74637e692ba095f4628070a3087b67db81de6deca0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8288 Malicious code in @zpp/campaign-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bf91721d9ccb3de458db5333c68a7144fbf85950c53ad2ee5c0086124814a1cd The OpenSSF Package Analysis project identified '@zpp/campaign-widgets' @ 10.9.2 npm as malicious. It is considered malicious because: - The...

MAL-2023-8255 Malicious code in csm27878 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0055598a8a443f1bd67fa612291473dcb36ba6e1c9927df85775eea3d207de11 The OpenSSF Package Analysis project identified 'csm27878' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8574 Malicious code in pyioapso (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ddface0422e0d25912e1810f515798f9258e861b2f6d89a9514856d598a5395f Malicious packages campaign targeting developers, payload is hidden using Steganography, exfiltrate host information...

MAL-2023-8223 Malicious code in @hnbi/searchfeuikit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fc2a084aa0cb1894201a316f58f41e4ec30f5b5cb2e4d0fbe2d514c544064de4 The OpenSSF Package Analysis project identified '@hnbi/searchfeuikit' @ 3.1.4 npm as malicious. It is considered malicious because: - The packag...

MAL-2023-8194 Malicious code in @zettle-bo/cash-register (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ede3f984e1ba545642d80ef08ce7649b6094423fff89e48416e59028359f2530 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8184 Malicious code in test-package-ings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c7e6330e4c9a50f2df87dcf36790eeb27d1642ecfd882b3a09774d594c03e764 The OpenSSF Package Analysis project identified 'test-package-ings' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8113 Malicious code in developer-scaffold-full-width-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de16c923e65362f8728b3d71ad9d78042c8f28793d8d720d387faf6316d8b174 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8122 Malicious code in jerry1319 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 39c3e74d9394364350aac9f2396311212f3cf3e8704fb23daf2bca46a9e24227 The OpenSSF Package Analysis project identified 'jerry1319' @ 1.0.10 npm as malicious. It is considered malicious because: - The package execute...

MAL-2023-8103 Malicious code in sharinj-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c38a5716c52678eb97b3b338a62f683268c28460657955b8ef607ef45c57a8cf The OpenSSF Package Analysis project identified 'sharinj-test' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-7993 Malicious code in testingoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 195be366acb384abf4322d56ed3ac6985d510e4aea1a4c6157fd8a2fbd9c5bc0 The OpenSSF Package Analysis project identified 'testingoli' @ 1.2.2 npm as malicious. It is considered malicious because: - The package...

MAL-2023-7992 Malicious code in pingserver-test.01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d1b45d47d16b0b11b03d83b5b03c34f73980a4e584b35227fbb1359f69c1bbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8049 Malicious code in fiji-core-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 840a4749ffe1b469a10dd0123341127855c52cbffc20bd6b9a2a0538ac453578 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7956 Malicious code in sb_chatbot_ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 962d49e68e611a6b10b1a3d716d60661cabfa0b0b8d76f43ba0e489e5c20f581 The OpenSSF Package Analysis project identified 'sbchatbotui' @ 11.11.11 npm as malicious. It is considered malicious because: - The package...

MAL-2023-7943 Malicious code in remove-bg-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fdcf2ad8e97745b6be357f0d7c486abc18016cb172caf360362952be6284ce15 The OpenSSF Package Analysis project identified 'remove-bg-cli' @ 2.0.8 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1476 Malicious code in irviewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2856bec7b72be87c4b6cc3f537871ee579bda13ad09ff85f5391ea1c0fdfe660 The OpenSSF Package Analysis project identified 'irviewer' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1449 Malicious code in zustand-rc.1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f36f860dc8e345626951d6e9c0b4c8798cb5b2ef0abd7e199f44840e71831a68 The OpenSSF Package Analysis project identified 'zustand-rc.1' @ 1.999.9 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1438 Malicious code in exp-core-style (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31032b8597c788373193761b90d13ba7f409a33d3a75f62a7ee5ba4e4ff9804e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1010 Malicious code in docusaurus-plugin-matamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28359b531d33ddceeca08244c1765d683b6b9256b420d2ffd6e6bac9e3ed8f3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8011 Malicious code in awell-libs (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f22989168c34b37227bb7bcfe0b03c27cd141f8ec26d34a78a0c0ba06553f881 Malicious packages campaign since 2021 targeting developers, steals source code and secrets...