Malware in seller-webchat-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in secure-fetch-utils-stable

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-11084 Malicious code in secure-fetch-utils-stable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3b042899a3895febb34f95a4fe1c7825c2e278bb7f8625b82b7d220e66c7b5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in release-platform-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00eefe8dd7e84a6095cb629fff60873eb0f15c63e8fb17e48fbaa4e53e69e4e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in release-platform-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-11076 Malicious code in release-platform-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00eefe8dd7e84a6095cb629fff60873eb0f15c63e8fb17e48fbaa4e53e69e4e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in secure-fetch-utils-latest

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-11002 Malicious code in secure-fetch-utils-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c66dff7a321aed95e4731350eec61896cd1851d384cb7528dffa45045bbfcaf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in ads-common-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

joplin (>=2.11.1, <=2.13.2) potentially affected by CVE-2024-53268 via @joplin/utils (>=2.11.2, <=2.13.4)

@joplin/utils NPM version =2.11.2, =2.11.1, =2.13.2 Source cves: CVE-2024-53268 Source advisory: SNYK:JS-JOPLINUTILS-15048154...

clearml-agent (>=0.17.0, <=0.17.2), manven (>=0.1.0, <=0.2.0) +4 more potentially affected by CVE-2024-53899 via virtualenv (16.7.12)

virtualenv PYPI version 16.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - clearml-agent =0.17.0, =0.1.0, =0.4.0, =0.0.1, =0.3.0.dev0, =0.13.2rc2, =0.16.3 Source cves: CVE-2024-53899 Source advisory:...

PT-2024-10674 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a missing bounds check in the analyzeAxes function of FontUtils.cpp, which can lead to a possible out of bounds read. This could...

Malicious code in seller-webchat-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 024c0618a42ed68bfdd63a4e68af72dfe7cdcb55d521bc3b167770c757388465 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-RP9H-RF7G-HWGR vulnerabilities

Vulnerabilities for packages: efs-utils...

GHSA-RP9H-RF7G-HWGR vulnerabilities

Vulnerabilities for packages: efs-utils...

MAL-2024-10551 Malicious code in ads-common-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50ce13b31db6b72b7a12f51897d3a8041b9894c083ea0da052b7d30a8fd2e224 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uuid-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 67e9eea857d57488a09639cf7c62b2507c6f72aa291543d524e2dd9a86532a73 The OpenSSF Package Analysis project identified 'uuid-utils' @ 10.10.11 npm as malicious. It is considered malicious because: - The package...

CVE-2024-47611

XZ Utils provide a general-purpose data-compression library plus command-line tools. When built for native Windows MinGW-w64 or MSVC, the command line tools from XZ Utils 5.6.2 and older have a command line argument injection vulnerability. If a command line contains Unicode characters for exampl...

RHSA-2004:072 Red Hat Security Advisory: nfs-utils security update

Bulletin has no description...

Eval Injection

Overview agentscope is an AgentScope: A Flexible yet Robust Multi-Agent Platform. Affected versions of this package are vulnerable to Eval Injection via the result = evals field of the iscallableexpression function in the agentscope\web\workstation\workflowutils.py file. An attacker can execute...