MAL-2024-11848 Malicious code in 000webhost-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0ab4aef1fc278a5d05573acaa29e2ae568c62a86e14c090199f33ae2aeaddeb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11846 Malicious code in stripe-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37cffd89914421e6ec876ab385cbb856e29b04d39b9a37f04de91f0f8a0bfa1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11845 Malicious code in ml-interactive-data-augmentation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e20810134f19a11553a575cd601700601cf374b00626760c86d6c3905cb0113b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11843 Malicious code in solhint-plugin-openzeppelin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f4a4cea0f7210535e002b329fb3bd7a547d17cac3f0db1831009855d61000a0a The OpenSSF Package Analysis project identified 'solhint-plugin-openzeppelin' @ 99.99.99 npm as malicious. It is considered malicious because: -...

MAL-2024-11841 Malicious code in graphql.vscode-graphql-syntax (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0d28da17294cea5d68bf358dd4576cf98bbc3d373b4add618e2c56ab5c18358 The OpenSSF Package Analysis project identified 'graphql.vscode-graphql-syntax' @ 99.99.99 npm as malicious. It is considered malicious because:...

Malicious code in graphql.vscode-graphql-syntax (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0d28da17294cea5d68bf358dd4576cf98bbc3d373b4add618e2c56ab5c18358 The OpenSSF Package Analysis project identified 'graphql.vscode-graphql-syntax' @ 99.99.99 npm as malicious. It is considered malicious because:...

Malicious code in resultstore-search-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 85736ae7368ae102434c7881aa59599a9d612a91f34c7b4f443f3604c21f60c8 The OpenSSF Package Analysis project identified 'resultstore-search-client' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2024-11839 Malicious code in rsd-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1ce32a78d33195ba4d402cad16a668c6dd0a2273f8e6a49b0ba2c65be6c88fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11836 Malicious code in action-mattermost-notify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff777c42ea9a589391478ecfd89da15137033e8ce5e0961b26f277f6e055c70e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11822 Malicious code in pobreiaia22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f201a6e789edf5a6b86e429b07c01f4098e234a4860594f42d18fa8590259208 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11821 Malicious code in pipedream-curl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c8b5e047b6a8fdba2b0c3473a51edbdb9b488f22377ca3a66bb206193e7da7e5 The OpenSSF Package Analysis project identified 'pipedream-curl' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11818 Malicious code in auth0-lock-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fc8cb7c85f580c66397adec583bbd6623eafcb98683fcf6299ca73188892009f The OpenSSF Package Analysis project identified 'auth0-lock-webpack' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

OESA-2024-2559 libsndfile security update

Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface. Security Fixes: libsndfile through 1.2.2 has an oggvorbis.c vorbisanalysiswrote out-of-bounds read.CVE-2024-50612...

Apache Hive Code Execution Vulnerability

Apache Hive is a set of data warehouse software based on Hadoop Distributed Systems Infrastructure from the Apache Apache Foundation in the United States. The software provides a data integration approach and a high-level query language to support large-scale data analysis on Hadoop. A code...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-47712)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47712 advisory. - In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix potential RCU...

Malicious code in azuredatastudio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f18b345dc494772b0800d6b81807d5d930ceb567876dab5d06e478d66f5cda77 The OpenSSF Package Analysis project identified 'azuredatastudio' @ 1.53.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11800 Malicious code in yir-image-gen-asana-rce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 050cc0b4f55e2e2b44e9eaeb0b6b269c8eab27bb007239d6fc7cb318e55f475d The OpenSSF Package Analysis project identified 'yir-image-gen-asana-rce' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in testin-elengo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 594a2ba539dc07c62c9e4e9310e88baf659a54029490fd15312eaba8cc279e00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11798 Malicious code in testing-example-amnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e3e68fcb0722dd3025334d128515302686aff3ebed84afc0747731353153fff The OpenSSF Package Analysis project identified 'testing-example-amnu' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-11795 Malicious code in pacbot-spa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2527f33d46883eac958d98baa0937139f8988ddc5f7803d5764921761ddf4e3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...