MAL-2024-871 Malicious code in wlwz-2312-7708 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5278474541c9b13f05047170d2095937206db31c20264da510a471e1757963f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in wlwz-2312-7708

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2020-7708

CVE-2020-7708 affects the Node.js packages named in the report: irrelon-path and @irrelon/path, specifically versions prior to 4.7.0. The vulnerability is a Prototype Pollution flaw exposed through the set, unSet, pushVal, and pullVal functions, allowing an attacker to modify object prototypes an...

CVE-2016-7708

...

CVE-2016-7708

CVE-2016-7708 is rejected/not used; this candidate is not associated with any vulnerability.

CVE-2015-7708

4images is affected (versions 1.7.11 and earlier) by an XSS vulnerability that allows an attacker to inject arbitrary web script or HTML through the cat_description parameter in an updatecat action to admin/categories.php. The issue is caused by insufficient input sanitization in the updatecat fl...