MAL-2024-2418 Malicious code in gew7-client-framework (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2353 Malicious code in ez-get-url-params (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1841 Malicious code in brkr-lib-components-react (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3239 Malicious code in @pragatib20/trim-right (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1630 Malicious code in mvp-website-html (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 89574af4bb00d4c540ffc8651f5ef4bcc0f72af2368ee6e32346807e91d2e8a0 The OpenSSF Package Analysis project identified 'mvp-website-html' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1556 Malicious code in rey-vue-smarttable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 98a856f629a1b4854c5202dbdd7b0919ec1ad20cd28a8fa2b52591843913f112 The OpenSSF Package Analysis project identified 'rey-vue-smarttable' @ 19.19.19 npm as malicious. It is considered malicious because: - The...

MAL-2024-1386 Malicious code in tec-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 125ddb22e15354e2319586116faa892343d4a86c8f79c9d6ed274d9acfb5f20d The OpenSSF Package Analysis project identified 'tec-docs' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1355 Malicious code in @content-platform/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8483b2f250f1824837729cc5bf8f6fa9fe76e44cc5c0e9352b1112c8c83cd0db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1334 Malicious code in multiconnections (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d080fb698cec14d7c79b82bff9f6ca58764dbfcd5b487ea88e5822e59e1d74cb The OpenSSF Package Analysis project identified 'multiconnections' @ 2.34.23 pypi as malicious. It is considered malicious because: - The packag...

MAL-2024-1323 Malicious code in @socialdeal/uikit-whitelabel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d53c0749d21786a6b7eeea319c37d26573f1ded671dc9cbed9e4508d9b65a2c0 The OpenSSF Package Analysis project identified '@socialdeal/uikit-whitelabel' @ 999.100.1 npm as malicious. It is considered malicious because:...

MAL-2024-1289 Malicious code in monitoring-coverage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa5e340610d92b601dc5de1615c159ce6efea84fa66dccd8d99128054d7cf5c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1271 Malicious code in web-ar-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd6b41d316342a401f8e262adb37d1982a359946c37d5b6dbbf9903eed6c6ea0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1160 Malicious code in xko2x (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9088a22cb637f620235729c3503e7ab8b9a11fb9469c5742b88fbcfd32be15dd The OpenSSF Package Analysis project identified 'xko2x' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2024-1186 Malicious code in types-for-adobe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 927dcbc233169c84ab7ef0e97232782f6bb821d476409cc6ccc8587995dabdc8 The OpenSSF Package Analysis project identified 'types-for-adobe' @ 99.3.9 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-1130 Malicious code in pulsate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e071febdd58970db5d85c86868aa5832ed6344d90733fb474caeaf317c138cf1 The OpenSSF Package Analysis project identified 'pulsate' @ 9.9.9 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2024-1104 Malicious code in lyft-exceptions (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5e0290aaa0cb90a501cb0a0b357f32d3e725f6f3a97541cbc2796671ea4e8f60 The OpenSSF Package Analysis project identified 'lyft-exceptions' @ 5.9.1 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-1064 Malicious code in pet-profile-micro-interaction (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd98e11aca525f441300cc29d3cebd96d52cee8d8620e951a805b48fe9305d33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1030 Malicious code in node-red-contrib-object-to-array (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc617e826788805ca870b385151ace964f43893d9560c8b2d9615276520929a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-944 Malicious code in web-ai-51pwn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d12e1726ae105c8c01ff6b542126b19d08da4dd16f74b751674c52f35363daa5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-895 Malicious code in wlwz-2312-8005 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbc0976e1337a3efa48a52f77fdef02a7087dc45ceae46bbf74c460027671342 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-685 Malicious code in wlwz-2312-5702 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c5cb97c5e63dbe220bb6c9965e2e1e297f989b0b418e088ac6f272beee61024 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-348 Malicious code in wlwz-2312-1907 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5077dbc02f07035c4e0e2dc2d6b4b2b88decafeab5df1b1eaae7f3d37bd64f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-357 Malicious code in wlwz-2312-2007 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b061f393282c6760e5ec89c8ee1f7b0bff5e6bbc14ebc698ffdc8317ee7aecb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-138 Malicious code in cagov-template-v5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 041aa485b2de4fd90575bf3656a8dee0ce0c0a4319b0919b62d35f6b98b090c6 The OpenSSF Package Analysis project identified 'cagov-template-v5' @ 19.2.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-71 Malicious code in cordova-plugin-canvas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c72f98238b951534c1437dc8a7c3ee8ab8463beb50c44c59d07cccdd15829386 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-35 Malicious code in axis-common-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d46e6aa49acd26b8f52fc1e1d11ffa3fb20d5efa8e9648fb414a0c25aaa81480 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-33 Malicious code in d5-es6-sass-boilerplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3090df994b516cfc30ee58cc5871282f61ebc4e378a73744fb779705e16a1a35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-23 Malicious code in snapfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 243c20cf789fbcfb3e3ba11a25b91aef2e8dfb1498fec76a215c1d04b1265343 The OpenSSF Package Analysis project identified 'snapfish' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7 Malicious code in chancets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbf9c5ae637ce86f5dd9b811e29691dbc62866f58c76f517cd6d68f03e142a2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-6 Malicious code in @skip-js/cookie-consent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5576fae3b0649b388c1eb920f54ed752672ecdd3558a0988c30504346de5f0c2 The OpenSSF Package Analysis project identified '@skip-js/cookie-consent' @ 0.8.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-8 Malicious code in @authentication-pages/vue-cli-prebuild (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3c92ef13745278b15d59dfa706f96df5f1c3bb0261c9471d3e56eaa1449059e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8774 Malicious code in unit-testing-controllers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 206ebabfab4ea20b85ed6293c085ea8a6c0c0d85a70a1616a1963ac8556cf315 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8772 Malicious code in chain00x (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c83ef376b2958042c056eb67747bc40dd5850c90e665e7eb769642be3974e70a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8747 Malicious code in mux-leverage-protocol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b12623ebfedef36fcab6ff1f92426346cafe3c214979943b5a2be849cf35a9d3 The OpenSSF Package Analysis project identified 'mux-leverage-protocol' @ 1.999.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-8713 Malicious code in @diil-front/chip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74f3f685f9f7080b81701a037923a9621b51fbafb68a17e12d9ceffd47981a0a The OpenSSF Package Analysis project identified '@diil-front/chip' @ 99.99.99 npm as malicious. It is considered malicious because: - The packag...

MAL-2023-8693 Malicious code in katal-sellercentralhmdsupport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8cdaad58325a54ebb6ba494e3d88fa6051937fe7092ef20c1f13db2c3fc8de54 The OpenSSF Package Analysis project identified 'katal-sellercentralhmdsupport' @ 70.0.0 npm as malicious. It is considered malicious because: -...

MAL-2023-8676 Malicious code in privalia-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 67798a086ab24af2e15f2344e63c54848b44d2abe2edb6adf1834f8dfae7be55 The OpenSSF Package Analysis project identified 'privalia-app' @ 3.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8610 Malicious code in docusaurus-plugin-matamoh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2587fce317c90b4371750f6dc2bd4c7d9ea86770d868b63eabf68afc96029c02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8553 Malicious code in kratos-nextjs-react-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 002a702a76a5afe71ba598cb987b7d8cb8624bd74161c63a0e642fb288083bb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8550 Malicious code in ory-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97e67d3893cb4ea477e80d85d47524af218e6579c6e04ed4037580b05b45060d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8529 Malicious code in f0-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d39b919f598c91daf62eb8ac34de91c6290cd75d798de1ea5f7b9c3690cab44d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8524 Malicious code in spotify-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6884d2a77686f419c030b7aabf153bc9524a9065a79051850a4dc0715d197267 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8489 Malicious code in one-host-remote-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c1701ddae4f18ae98068db0679d932010b9908128879e61b3d39f67afeb48dc The OpenSSF Package Analysis project identified 'one-host-remote-module' @ 3.3.3 npm as malicious. It is considered malicious because: - The...

MAL-2023-8483 Malicious code in safe-place (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b80cbcb24e4f1807ee06fd72f2b7a227e474627d391ec40635927294aab3a8d6 The OpenSSF Package Analysis project identified 'safe-place' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8458 Malicious code in frontegg-react-sanity-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb25e4621d231dcfb19174b3d68e319d416128e938f699d683cd4cd436f0fd10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8445 Malicious code in @inventashif/workspace-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fe4fedd5d11a10d847f74fc3fa803fcacb0f7484be032ee6b87bdb61e84ed31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8429 Malicious code in littest (crates.io)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b7dbb9d0364d3e2b9efec40fc7a2ecdca02406774e6a4359423e6357cf9647e4 The OpenSSF Package Analysis project identified 'littest' @ 0.3.1 crates.io as malicious. It is considered malicious because: - The package...

MAL-2023-8359 Malicious code in aws-enumerate-iam (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 96d7eea455989a7a10bf2fafd9f9c4a2d5d9a4c2a3ec852e424885f3e51c5edb Attack targeted at users of Alibaba, AWS and Telegram via malicious packages published to PyPI. The malicious code was hidden in strategic...

MAL-2023-8333 Malicious code in @dsr-rollback-org-hover-owled-agios-situs/dsr-rollback-package-hover-owled-agios-situs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45cfaa8e8c857c3d794bba3095a010e4210da4d46a216b4a5bb3b9e155a8e5f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8344 Malicious code in situs-bandar-togel-hadiah-4d-10-juta-terpercaya-hk-sgp-sdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 476c626f92379b4df2800baa59991b278c3f33426ff69fbd12afb29821810430 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...