MAL-2024-1564 Malicious code in randombullshitgo-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 057c8df14eaa8785b6129f2c579be84c7330b0f8d7e9bb6eff202f60bdddabfd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in randombullshitgo-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 057c8df14eaa8785b6129f2c579be84c7330b0f8d7e9bb6eff202f60bdddabfd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aws-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a30bda5bff5f57af1051023ce71acba6b09efbaa75367bd8a05831377244491c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1561 Malicious code in rb-payment-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4eb4113e8b820d0f3ed35205bfc6b682ce6bb937db31002b79c44bb723908e18 The OpenSSF Package Analysis project identified 'rb-payment-wallet' @ 0.1.2 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1617 Malicious code in test-pkg-blabla (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83b007683c452075ec2dfb23b7de20d38b8d28441ce63b4745fd114bba008a94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1559 Malicious code in scm-design-system-cra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a41692a79d6b73b049dbff75d56c8a18218a4878d024ef4c0da7b19b16ebab3a The OpenSSF Package Analysis project identified 'scm-design-system-cra' @ 0.1.1 npm as malicious. It is considered malicious because: - The...

Malicious code in scm-design-system-cra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a41692a79d6b73b049dbff75d56c8a18218a4878d024ef4c0da7b19b16ebab3a The OpenSSF Package Analysis project identified 'scm-design-system-cra' @ 0.1.1 npm as malicious. It is considered malicious because: - The...

MAL-2024-1558 Malicious code in cosma-ui-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 49388262dd0b3d40b1f426a488f94937d409f2ce2053702f81a099fa8ed3b3c2 The OpenSSF Package Analysis project identified 'cosma-ui-icons' @ 9999.999.3 npm as malicious. It is considered malicious because: - The packag...

Malicious code in glamorous-codemods (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a6ea39de6911785f412a5a42905522010930dec6afece74458f8b4859a0fce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1551 Malicious code in integration-web-core--socle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4bee6dc4af217ab7789d50b0fed6b7d01749bf9ef8c725c1dfee59c068f9af3b The OpenSSF Package Analysis project identified 'integration-web-core--socle' @ 1.4.2 npm as malicious. It is considered malicious because: - Th...

Malicious code in vue2-webviews (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95a66e858fcc284e27c0e0ac5e2d76de3b0f6c670ac21a185369832d45f40f5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora: Security Advisory for qt6-qtremoteobjects (FEDORA-2024-bfb8617ba3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2024-1543 Malicious code in ing-shared-navigation-de (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74f93af2ce71593d4858563cf9cb0ae31150636aef60cad09f5ad639edda6194 The OpenSSF Package Analysis project identified 'ing-shared-navigation-de' @ 200.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-1540 Malicious code in node-pre-gyp-test-app2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b3456b640ac819fb66bf7f58e41f74e65b868629f609e863ca1bbe300070e7a8 The OpenSSF Package Analysis project identified 'node-pre-gyp-test-app2' @ 0.1.0-release1.release2 npm as malicious. It is considered malicious...

MAL-2024-1541 Malicious code in pentesters987abc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c42f65f70dff1af7f6a44a0622052e7a0f92113d52a9eb1258c158f1ff2ad27d The OpenSSF Package Analysis project identified 'pentesters987abc' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

[SECURITY] Fedora 40 Update: qt5-qtremoteobjects-5.15.14-1.fc40

Qt Remote Objects QtRO is an inter-process communication IPC module devel oped for Qt...

MAL-2024-1534 Malicious code in cpr-mfe (npm)

This package is considered malicious because it communicates with a domain associated with malicious activity and the package executes one or more commands associated with malicious behavior...

SUSE CVE-2024-36952

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up There are cases after NPIV deletion where the fabric switch still believes the NPIV is logged into the fabric. This occurs when a vport is unregistered...

MAL-2024-1531 Malicious code in h5guard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 800eaf4d230c69b26a33a57a3527a81f37d893d90e034cd3add1a98bdf63e314 The OpenSSF Package Analysis project identified 'h5guard' @ 1.0.2 npm as malicious. It is considered malicious because: - The package communicat...

RHEL 5 : pidgin (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - pidgin: Out-of-bounds write in purplemarkupunescapeentity triggered by invalid XML CVE-2017-2640 - cipher...