MAL-2024-11627 Malicious code in luna-paysure (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d22eccc425ab8fc5afe244efb33dd6d500ea6bcdf0942a02dedb3daa9f17da51 Importing the module causes exfiltrating of IP and hostname. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything...

MAL-2024-9285 Malicious code in splunk-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f3b4cb45a7c61ff4ef92918dc5438c1ae4845121a1c99903638fb56ffdbe8014 The OpenSSF Package Analysis project identified 'splunk-docs' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8917 Malicious code in ibm-strings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d299d0b8d9bf7cc9c318e385566c4f1c9c972374224f38ac12d8fb90612dbdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8867 Malicious code in node-integration-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23d6de79c4bf861e69bfe8d180b460e32004ab2e37565da361ba8874d29c6a71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8727 Malicious code in esdjiw (npm)

The package contains obfuscated code to load content from a suspicious external domain in the user's browser --- -= Per source details. Do not edit below this line.=-...

MAL-2024-8406 Malicious code in @diotoborg/libero-ratione-delectus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e03dc878ba32f02ed8a95a2b374d2309303b2e1b73e66f470041bb5e2298f62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7976 Malicious code in new-relic-browser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b484734422b24dacf15c15aabdc6a98a5b34da6281c42feab2eea60be6bd36f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12265 Malicious code in evil-pkk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 08a7017f27a32357776a4c781a0f5d29d48569562b97c03f91811af7aaaac2ca Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-2009 Malicious code in w7-poc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6f1e22fd67359f4e020261c99a45facf30e85d789c3247f245391d4b2ef77feb Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-3278 Malicious code in subdomainer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 be979ecd7261fc996ff3007675ba6e59cbdab8da999ab44c937adb5b1a609724 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-7802 Malicious code in @mentoring-services/sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6248cce7fe3e50ce8c9fe940f959d883f287bff1a15d23813fa4dad7f960a486 The OpenSSF Package Analysis project identified '@mentoring-services/sdk' @ 10.20.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-7792 Malicious code in roblox-ts-core (npm)

This package contains a malicious postinstall script which downloads further payloads and delivers QuasarRAT. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53e846a11945248574678fe65e4f8cd5b4a766ff129c761b615aef0f0c595fa5 Any computer that has this package installe...

MAL-2024-7753 Malicious code in jfrog-jfconfig-grpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 177a2d1912b1051b4347d51ff6410db1077d40c3cd21468d673acef023e3e1da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7743 Malicious code in jquery-ui-dialog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f1ac81ca06088c1af7f942bcd5c3e05a81ee19ded09f4417b8eea369da63f3c3 The OpenSSF Package Analysis project identified 'jquery-ui-dialog' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7423 Malicious code in dependent-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 70f70c2dd1e2fa144fb729148ad1259433561dcfc205e028a514ea1fc4c6a65a The OpenSSF Package Analysis project identified 'dependent-package' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7049 Malicious code in @yu-life/yulife-bdd-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8dfe091de922cc251578223955b74b56ade98fa67b719bcaa584d3403602f992 The OpenSSF Package Analysis project identified '@yu-life/yulife-bdd-framework' @ 0.0.72 npm as malicious. It is considered malicious because: -...

MAL-2024-7046 Malicious code in workarea-gift-cards (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6806 Malicious code in capistrano-telegram-notification (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6685 Malicious code in array-xml-serialization (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6317 Malicious code in aastra-xml-api (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6266 Malicious code in 1-as_identity_function (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5551 Malicious code in plasticswampbubble (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5197 Malicious code in hashdecrypt (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5078 Malicious code in discordpy-bypass (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4371 Malicious code in Blоckсоre.Netwоrks.SERF (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3934 Malicious code in watching-shazam-fury-of-the-gods-movie-online-on-free-at-the-home (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3933 Malicious code in watching-shazam-fury-of-the-gods-2023-full-online-free-on-streaming-at-home (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3917 Malicious code in watch-shazam-fury-of-the-gods-full-movies-free-on-at-home (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3081 Malicious code in tauri-plugin-sql-api (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2795 Malicious code in online-creed-3-watch-full-movies-free-hd (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2418 Malicious code in gew7-client-framework (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2353 Malicious code in ez-get-url-params (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1841 Malicious code in brkr-lib-components-react (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3239 Malicious code in @pragatib20/trim-right (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1630 Malicious code in mvp-website-html (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 89574af4bb00d4c540ffc8651f5ef4bcc0f72af2368ee6e32346807e91d2e8a0 The OpenSSF Package Analysis project identified 'mvp-website-html' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1556 Malicious code in rey-vue-smarttable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 98a856f629a1b4854c5202dbdd7b0919ec1ad20cd28a8fa2b52591843913f112 The OpenSSF Package Analysis project identified 'rey-vue-smarttable' @ 19.19.19 npm as malicious. It is considered malicious because: - The...

MAL-2024-1386 Malicious code in tec-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 125ddb22e15354e2319586116faa892343d4a86c8f79c9d6ed274d9acfb5f20d The OpenSSF Package Analysis project identified 'tec-docs' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1355 Malicious code in @content-platform/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8483b2f250f1824837729cc5bf8f6fa9fe76e44cc5c0e9352b1112c8c83cd0db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1334 Malicious code in multiconnections (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d080fb698cec14d7c79b82bff9f6ca58764dbfcd5b487ea88e5822e59e1d74cb The OpenSSF Package Analysis project identified 'multiconnections' @ 2.34.23 pypi as malicious. It is considered malicious because: - The packag...

MAL-2024-1323 Malicious code in @socialdeal/uikit-whitelabel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d53c0749d21786a6b7eeea319c37d26573f1ded671dc9cbed9e4508d9b65a2c0 The OpenSSF Package Analysis project identified '@socialdeal/uikit-whitelabel' @ 999.100.1 npm as malicious. It is considered malicious because:...

MAL-2024-1289 Malicious code in monitoring-coverage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa5e340610d92b601dc5de1615c159ce6efea84fa66dccd8d99128054d7cf5c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1271 Malicious code in web-ar-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd6b41d316342a401f8e262adb37d1982a359946c37d5b6dbbf9903eed6c6ea0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1160 Malicious code in xko2x (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9088a22cb637f620235729c3503e7ab8b9a11fb9469c5742b88fbcfd32be15dd The OpenSSF Package Analysis project identified 'xko2x' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2024-1186 Malicious code in types-for-adobe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 927dcbc233169c84ab7ef0e97232782f6bb821d476409cc6ccc8587995dabdc8 The OpenSSF Package Analysis project identified 'types-for-adobe' @ 99.3.9 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-1130 Malicious code in pulsate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e071febdd58970db5d85c86868aa5832ed6344d90733fb474caeaf317c138cf1 The OpenSSF Package Analysis project identified 'pulsate' @ 9.9.9 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2024-1104 Malicious code in lyft-exceptions (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5e0290aaa0cb90a501cb0a0b357f32d3e725f6f3a97541cbc2796671ea4e8f60 The OpenSSF Package Analysis project identified 'lyft-exceptions' @ 5.9.1 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-1064 Malicious code in pet-profile-micro-interaction (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd98e11aca525f441300cc29d3cebd96d52cee8d8620e951a805b48fe9305d33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1030 Malicious code in node-red-contrib-object-to-array (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc617e826788805ca870b385151ace964f43893d9560c8b2d9615276520929a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-944 Malicious code in web-ai-51pwn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d12e1726ae105c8c01ff6b542126b19d08da4dd16f74b751674c52f35363daa5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-895 Malicious code in wlwz-2312-8005 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbc0976e1337a3efa48a52f77fdef02a7087dc45ceae46bbf74c460027671342 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...