MAL-2024-10751 Malicious code in listing-uss-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bdefff07d9e9bd5fa8b0b524652775ca14bf5851937f5fa73f1e783996ad940 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress WP Activity Log Plugin <= 5.2.1 is vulnerable to Cross Site Scripting (XSS)

Software WP Activity Log Type Plugin Vulnerable versions = 5.2.1 Fixed in 5.2.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10793 Patch priority Medium CVSS severity Medium 7.1 Developer Melapress PSID ad9533377437 Credits mikemyers Required...

MAL-2024-10673 Malicious code in lightweight-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9ffe60e0945106204ad59c780f309329d5965654dd8e82c8da2a847c93e08fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10670 Malicious code in hubot-hangouts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a411a5e1860f7c3e70679f26150c8bc5300c4e1545d0b6e53e9794171a5529a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10667 Malicious code in grpclb-zk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 522d534a3344ad4af3e68233a9a85c47c721dbd0fc98ecac17ec10ae1216311b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10652 Malicious code in @ps-i18/i18-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 262dc184a4159c2a1a26d9f3316074336c0ab00d4fae7ce82864cb736106ecb2 The OpenSSF Package Analysis project identified '@ps-i18/i18-utils' @ 1.2.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10666 Malicious code in export-pruner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86e2f312ed9fbfa3af3855f0f17ba52946628c78e0176ec0f9c5a7ed8f2ce8ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10630 Malicious code in sixsense (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cb77c89a27aff142eb4dd167744ea5784b414741b03b0c7dd1b4eb5a3614c0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sixsense (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cb77c89a27aff142eb4dd167744ea5784b414741b03b0c7dd1b4eb5a3614c0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10663 Malicious code in eslint-plugin-ssc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cd44b1dc2a7c0a52132eee12cd12dfc07abdf093ae71052bfac7ea29771b985 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-shopee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a491d7ca4f79d0761b84a5784731279e82a28cf0aa3be6840e20b003a2543ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10662 Malicious code in eslint-plugin-shopee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a491d7ca4f79d0761b84a5784731279e82a28cf0aa3be6840e20b003a2543ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10661 Malicious code in eslint-plugin-module-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afc57b3b316c94a93252629b2c608c1e0dfd28fa51024ff8e2957db8efb8d48b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10660 Malicious code in eslint-plugin-mark-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3454a8e6853853d2148cad33c350ce65ee8d66082f3b5f9f85c6fa8d2936d6fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10658 Malicious code in eslint-plugin-foody-custom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 413bc171b326027e7cbf99cdc011916c6ae72ea6deb375617558510c4e80fbb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-49511

creationtimestamp| type| source ---|---|--- 2024-11-12 23:05:53+00:00| seen| https://t.me/cvedetector/10739...

MAL-2024-10603 Malicious code in docker-centos-hello (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71090e29427fee974fae520d89e3e7df61c45f9cb63241c5b187c8cf5fd63556 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

kernel: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix possible use-after-free during activity update The Linux kernel CVE team has assigned CVE-2024-35855 to this issue. Upstream advisory:...

MAL-2024-10599 Malicious code in bytes-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52ffd94abfbfd2f2e971d55c6e01e3fa3ef3fa60ecd7d609df30f438fccd6bec The OpenSSF Package Analysis project identified 'bytes-guide' @ 99.3.5 npm as malicious. It is considered malicious because: - The package...

Malicious code in bytes-guides (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1671de27300530379441b59e870fa2d13121919510fe9f5ced2bb2a4dc2e6fe1 The OpenSSF Package Analysis project identified 'bytes-guides' @ 99.3.5 npm as malicious. It is considered malicious because: - The package...