Malicious code in dave-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5c5e4c9469fec2d35256dcb0afcf57d63e6cfcf6ef685cf0f916f05cedc34c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pb-node-modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13f6ed4f1be7aaf5a813cae62ab02bae6da785284b44b4ec1ef18522f3c0f7a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in twilio-realtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b685743691677bab2a820511e27dea13c5ce9441dbd97ca3a24dca0cb92a8a8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zztest82 (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 632d9a2711114ce930c19d98e24aab1daa8d6d2a81f71ef0025260b16442acec Any computer that has this package install...

Malicious code in gslack (npm)

This package runs commands on import that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72940e36f27a988f3e03f79a6a0ce0cafc2e871808da0318087ed2657454ecf9 Any computer that has this package installed or running...

Malicious code in webhook-example-coinbase-commerce-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware caf969b51a297b05f640bf97cc7a17661d904a676086486f87b2d3241a30e431 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sdk-coin-ada (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c39dc006518bfc9ed3a2846ae2e407993b19b826cb2c30c0a31bace1a1ee06f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in podium-pride (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5abcc917b2c3c387cbb0096d57ec3b264785aa5e13f0fd89e57133b7c30c820c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in woodpecker-ci (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cff5749234f2b25995b0c9e8c5b6baa0434340fe0646aa21e19eef1e6612812a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in acm-nano-logger-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8669771f2fb91caaf8e8b4059e9466a605b69db4766b85ce718c33d1b09999a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-11969 Incorrect default permissions in Cradlepoint NetCloud Exchange

The NetCloud Exchange client for Windows, version 1.110.50, contains an insecure file and folder permissions vulnerability. A normal non-admin user could exploit the weakness in file and folder permissions to escalate privileges, execute arbitrary code and maintain persistence on the compromised...

Malicious code in babelcl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d06bcaaea23cb4957729868259d43ca4c69f5887e9896cd4cae87623475fcfb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spex-dts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93132811b829ac6c32b8cf1e2c2c6bcaba42147399c45c495f0879e22871140f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sportdigi/scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f680e619f440b13e9d346c4482d63b5917ea63581ff977594d0b7244b6a61307 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-jaws (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09ca3d019ce0bb16989d59940c968d7fa19e830fdefee7ada26b2ee515b9b177 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sendbird-uikit-gpt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c0159cc60889c7ed6fb80ba101153a9858406a8f7a2d72825b6a3bbd597ca71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/cupiditate-perferendis-repudiandae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be1a1e30efc8f2edde1f365989aec5b901f987c1459819caab446b8152561acb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @illimity/rtl-faqs-state (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b3cec0888ebd3cfb912bb1459486caca7109d7fdb2a980c28641e3eef38d451 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @lbnqduy11805/reimagined-happiness (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b97e2395d2365418c586217033d6037fb2930c3ad943b2010f1cb2ef41bde62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in package-ddgjhd-weagd-24h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cef1d69ea4430962765b6d64ea615799272b79edbeb858dff62f8113a49b9704 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...