The vulnerability of the WebRTC component in Google Chrome browsers, related to recording beyond the buffer limit, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebRTC component in the Google Chrome web browser is related to memory corruption beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access sensitive data, compromise its integrity, and cause service interruptions...

Malicious code in dx-hotels-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 757cbf55b30ccb4cbbf7c26afbc8eb1493280155f0ae8578700044d07a611f5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in colotama (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fa7312f48aedc863c1eb3377178692b7cb1fe1503114d3cbc6cdc97572b9a6c0 The pyprettifier library has a feature to send out the user home path throuh the logger. It's attached to the init of EmojiConverter class. Other related...

MAL-2024-9038 Malicious code in @plentyofcode/header-bidding-adslot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis af5eb7081dde9d70a0712995098c35c53b72258056714c3dbefd6a3d194d6ed3 The OpenSSF Package Analysis project identified '@plentyofcode/header-bidding-adslot' @ 2.0.36 npm as malicious. It is considered malicious...

MAL-2024-9033 Malicious code in tesgotestpytest-npm-com-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b5967a11e2661f28b2148fa4adc68edfa052e545caf5e0b6823865eb4655ab5f The OpenSSF Package Analysis project identified 'tesgotestpytest-npm-com-test' @ 1.999.0 npm as malicious. It is considered malicious because: -...

MAL-2024-9034 Malicious code in vault-assist-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8e6cabe2402b7271a427b21266f884d7992b70f29714ab10a32aaa2eb3c56a8d The OpenSSF Package Analysis project identified 'vault-assist-tool' @ 1.5.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in repo-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 475962f34cf11b2eb56bc65cbb239a83bb17063ca8bb9b0f03d295a5b88e4b6a The OpenSSF Package Analysis project identified 'repo-private' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9025 Malicious code in textannoviz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d112629d453ff55ba22ba56e98536f241a9ed17883c1bd52e57da76c41a8f131 The OpenSSF Package Analysis project identified 'textannoviz' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9024 Malicious code in @plentyofcode/reef (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b990437e587fd2474b5000fd9f707f0e84e18f3c7dcea47121c3c8e8d28c2316 The OpenSSF Package Analysis project identified '@plentyofcode/reef' @ 1.1.263 npm as malicious. It is considered malicious because: - The packa...

Malicious code in saywh11222 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 66e2b9f8537aaebeea0768739ff431e4fe4c8dc5ea9bab0d191d6f555384b25f The OpenSSF Package Analysis project identified 'saywh11222' @ 0.0.1 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-9022 Malicious code in saywh11222 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 66e2b9f8537aaebeea0768739ff431e4fe4c8dc5ea9bab0d191d6f555384b25f The OpenSSF Package Analysis project identified 'saywh11222' @ 0.0.1 pypi as malicious. It is considered malicious because: - The package...

Malicious code in alertsorchestration-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad590e8c8853e4883c2994808bae19870b1d76002b74c084b196e7e4ebcf6cea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in inclusive-ai-dao-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1256786c01aeb97c5bae935d007b7939062250f307c5369a6a6597e12857995c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9003 Malicious code in lean-coffee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 40091a9e1c992e1036913597e929c36c5b56682d022e7260f42badcc3705df8c The OpenSSF Package Analysis project identified 'lean-coffee' @ 9.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9001 Malicious code in worldpay-raft-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce4e9de320d43e5e802d970b2666de1f37e255c6fb5382d86e367bbcbeb32af3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in worldpay-raft-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce4e9de320d43e5e802d970b2666de1f37e255c6fb5382d86e367bbcbeb32af3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in whatnot_seller_api_docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bd5f2c9e95b729435440515ed96f944e44f9be9e7843d90090aeef7a7a0716d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @helvetia-italia/ng-selly-lib-operator-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1fd81a66a867d353506b97a895921b666f5831fa169eb6cef4e07ef98e259328 The OpenSSF Package Analysis project identified '@helvetia-italia/ng-selly-lib-operator-dashboard' @ 10.20.37 npm as malicious. It is considered...

Malicious code in @mallutrojan005/coveralls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d735ee63af3d7bfaf8e5af37b0bd6a8034f4283ad069c65241a1c3f6c8ea7100 The OpenSSF Package Analysis project identified '@mallutrojan005/coveralls' @ 2.1.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-8996 Malicious code in @mallutrojan005/coveralls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d735ee63af3d7bfaf8e5af37b0bd6a8034f4283ad069c65241a1c3f6c8ea7100 The OpenSSF Package Analysis project identified '@mallutrojan005/coveralls' @ 2.1.0 npm as malicious. It is considered malicious because: - The...