MAL-2024-2321 Malicious code in eslint-config-lf-eslint (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in eslint-config-distribution (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in eslint-config-lf-eslint (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2319 Malicious code in eslint-config-bsee (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in eslint-config-bsee (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2318 Malicious code in eslint-config-bayzat (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in eslint-config-bayzat (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in dragonpulse-config (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2261 Malicious code in dragonpulse-config (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2015 Malicious code in config-storages (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in config-storages (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @mosfe/owl-config (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2817 Malicious code in @mosfe/owl-config (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @mosfe/beam-lint-config (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1818 Malicious code in @mosfe/beam-lint-config (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2014 Malicious code in @expue/config (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @bizone/prettier-config (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2892 Malicious code in @bizone/prettier-config (npm)

--- -= Per source details. Do not edit below this line.=-...

HashiCorp go-getter Vulnerable to Code Execution On Git Update Via Git Config Manipulation

Summary HashiCorp’s go-getter library can be coerced into executing Git update on an existing maliciously modified Git Configuration, potentially leading to arbitrary code execution. This vulnerability, CVE-2024-6257, was fixed in go-getter 1.7.5. Background HashiCorp’s go-getter is a library for...

PT-2024-5875 · Hashicorp +2 · Go-Getter +2

Name of the Vulnerable Software and Affected Versions: HashiCorp’s go-getter library affected versions not specified Description: The issue is related to the go-getter library's handling of Git updates on existing maliciously modified Git configurations, potentially leading to arbitrary code...