Malicious code in powpeg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 888651be4245ed94e8c3c538181c95691f87e394e03ebe7d425abd55a1f95749 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12106 Malicious code in powpeg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 888651be4245ed94e8c3c538181c95691f87e394e03ebe7d425abd55a1f95749 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wp-crontrol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11dbd6b64c95e1656b934ea5eb5777054646b14af3e48acd8ea85546f3a0a930 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12102 Malicious code in ing-feat-business-lending-financieringscheck (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9d7d4045083acf1cce6a6881c2eca10aa356c23635cae053af2e794ae35bd656 The OpenSSF Package Analysis project identified 'ing-feat-business-lending-financieringscheck' @ 1.1.0 npm as malicious. It is considered...

Malicious code in opsgeniewebhook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07d9cb12e4cb019225476233e2c9739733fa4a73420e916e0db42a01a6abcf33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12099 Malicious code in opsgeniewebhook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07d9cb12e4cb019225476233e2c9739733fa4a73420e916e0db42a01a6abcf33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12098 Malicious code in widgets-mainappointments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a05c4f3cc4d5297de929275823c2b67fd6bb6f8988f85acc300b9e4b342219b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in widgets-mainappointments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a05c4f3cc4d5297de929275823c2b67fd6bb6f8988f85acc300b9e4b342219b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in openai-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 025855a4aad79b7f6961770b428612b04f28558b5aaa0eafd1590c9bd641dcc0 The OpenSSF Package Analysis project identified 'openai-extension' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-12094 Malicious code in ui-forms-embed-components-reporting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2cc02fa4d714e4e0de4210d4132cb0c07b319906e7f88f1f659e43e9ba8b9bb7 The OpenSSF Package Analysis project identified 'ui-forms-embed-components-reporting' @ 1.21.0 npm as malicious. It is considered malicious...

Malicious code in react-native-simpl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c97d735ebc317ac72a7551682b1498e38aa84ed2e3be90fc979c8c7fedeb8b8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in owncloud-customgroups-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6db2fb0d1c0650fa0c9e68fc32c5efc05a4c0571b13308b954b8b68a7c590fe6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mono-faucet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a9b64ffe282d49a1f13db908a30b2713843c5dc3ac78ec52d50c8bcf450e401 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12085 Malicious code in mono-faucet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a9b64ffe282d49a1f13db908a30b2713843c5dc3ac78ec52d50c8bcf450e401 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-11975

creationtimestamp| type| source ---|---|--- 2024-12-21 07:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldse5t67pk2l 2024-12-21 07:29:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113689636519016726 2024-12-21 08:38:44+00:00| seen|...

MAL-2024-12083 Malicious code in lerna-monorepo2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 271f42aae85ac8961f1f78e8a64fb0a39eccde9c8d632a30fb8c1e03968d6d51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testbyakash2310xxxxxxxnowaympasti (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f7818fe132eec6253859eba4bdf2ae393a02cbcba1e5a1f144411a4de2626bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testbyakash2310please (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3ab898b094ec69febe5691ee0bb06b4040dc1dd9c9bb9632fd7b3d24d2b2870b The OpenSSF Package Analysis project identified 'testbyakash2310please' @ 69.0.0 npm as malicious. It is considered malicious because: - The...

CVE-2024-56330

Stardust is a platform for streaming isolated desktop containers. With this exploit, inter container communication ICC is not disabled. This would allow users within a container to access another containers agent, therefore compromising access.The problem has been patched in any Stardust build pa...

CVE-2024-56330 Session VNC may be accessed by other sessions on the same host in stardust

Stardust is a platform for streaming isolated desktop containers. With this exploit, inter container communication ICC is not disabled. This would allow users within a container to access another containers agent, therefore compromising access.The problem has been patched in any Stardust build pa...