MAL-2022-1420 Malicious code in babelllugintransformes2015modulescommonjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85a16e3db18168e71a2eeec8f9190a55ae782642089ef8b41719535a6a434a82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1425 Malicious code in babelplugintansofrmdecoratorlegacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a104b382c83355bec1b2321d15efbc629c7763cc9fa74847a62380545a80d608 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Babel: Remote code execution

Background Babel is a collection of tools for internationalizing Python applications. Description Babel does not properly restrict which sources a locale can be loaded from. If Babel loads an attacker-controlled .dat file, arbitrary code execution can be achieved via unsafe Pickle deserialization...

GLSA-202208-03 : Babel: Remote code execution

The remote host is affected by the vulnerability described in GLSA-202208-03 Babel: Remote code execution - REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none. CVE-2021-20095 Note that Nessus has not tested for this issue but ha...

PT-2022-7067

Name of the Vulnerable Software and Affected Versions Open Babel versions 3.1.1 and earlier Description The issue is related to out-of-bounds write vulnerabilities in the translationVectors parsing functionality of Open Babel, which can be triggered by a specially-crafted malformed file,...

Malicious code in vue3-babel-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5cac02007b4690bac994eb4568b35a36b6b8e314560aaec41466da2895e6fd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6999 Malicious code in vue3-babel-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5cac02007b4690bac994eb4568b35a36b6b8e314560aaec41466da2895e6fd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview babel-plugin-remove-jsx-empty-expression is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only...

Malicious Package

Overview babel-preset-es201 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

Malicious code in wm-babel-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c40b16b44aa067eebda03acb7865575fbdd8025fc1c6252232544c6c0e6e047 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7190 Malicious code in wm-babel-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c40b16b44aa067eebda03acb7865575fbdd8025fc1c6252232544c6c0e6e047 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babel-plugin-inline-gl-constants (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b4230bc5ae1e029303b953ce2f3b730106c96218de4621c3189f865e9ba6447 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1405 Malicious code in babel-plugin-inline-gl-constants (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b4230bc5ae1e029303b953ce2f3b730106c96218de4621c3189f865e9ba6447 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babel-plugin-transform-require-ensure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 529ed1b6c6ad7d47d49ee5576dcf7cdf38c7f878d74115d4458fac45a6f45f6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babel-plugin-svg-em-dimensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9313bfc7ff221388bac4316b84a9101c98eeb6b714f66930ec782a9ef19c4ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babel-preset-es201 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2013fe3655b97e4072dd89c0ab5b249679678c592189d6caacaac2a87afee0ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1411 Malicious code in babel-preset-es201 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2013fe3655b97e4072dd89c0ab5b249679678c592189d6caacaac2a87afee0ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

new packages: babel

An update is available for babel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

EulerOS Virtualization 2.10.1 : babel (EulerOS-SA-2022-1367)

According to the versions of the babel package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via...

EulerOS Virtualization 2.10.0 : babel (EulerOS-SA-2022-1393)

According to the versions of the babel package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via...