Malicious code in coolblue-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fac07d2b71de3ca79060d86a07a3e16c83b66f3560e38a3be6457b24a4b0afb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Design/Logic Flaw

Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes, and Spinnaker's Rosco microservice produces machine images. Rosco prior to versions 1.29.2, 1.28.4, and 1.27.3 does not property mask secrets generated via packer builds. This can lead to exposur...

Malicious code in selfbots-discord (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdd02f7dae53a61aeaad39564c4c3265905c2518087360d0f2be2cafd48f3648 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3902 Malicious code in internallib_v607 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 931eca513bda2e5ce823f67c77a9e9ae645bf8bdfaad07b6e6afb054cca22438 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-4760 · Suse · Suse Rancher

Name of the Vulnerable Software and Affected Versions: SUSE Rancher versions prior to 2.5.16 SUSE Rancher versions prior to 2.6.7 Description: The issue is related to the cleartext storage of sensitive information in SUSE Rancher, allowing authenticated users to retrieve plaintext versions of...

Malicious code in ug-lifjjs-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e581f845ff82ba5bc69671074334830a97a5a7b9a97f2e322f8fea230e11681 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in onmnnm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78c932f6b0cbfb634f682c1d83a1b81d98e679d760d2f1b42b6320213295c079 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in postcsssafeparsear (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 642a01e7fc82676258259f7b3732ec8dfdd703599885ddf409e3396947c354bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mongobd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5abc8f5305dab0b5e1d95e8e794cc4b160c5a2d4999d4900d4ad894054dcea9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rochman (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2a051e5fe59d786dc9f7e50b2642cc0caaf2e4977a85fdc5b49d21c6b29f367 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @m365-admin/customizations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67df9064253c6ee1deb2df543436530fcd9bad3b70a30eb34d838e86bcf0f29b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in npm-test-failer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f5a379a5c56d0b7d910cd1583efec3a5fe98687eef6cc10097b99682dbde7ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mitek-science-mweb-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a09b93f1da388cf6ad51c93c0ee3385524d3cb0f1557a6ead30db092021312d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in runeaudio-runeui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 293a53cd162ee364fb1efa252524f8a007b6ec4eb30d3890bf00f27163b41d71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in native-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89b5162a3b0e694963b12247772774451535a0374a380e9b49c9f03c0f84d383 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test494 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4eee97c9c0e65b38d0550ad3c3c448e647fc469837a13ab37682c6cfd2a5c34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-grailed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68e27913794c845eb9c7b6494883679b80f3613c18cf13b4c97b283b67b75fc0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-ai-text-analytics-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0be45a664e75a6e45605931661743132d5e63f27e6d555d369b7eeff1694a71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in asana-api-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bd31cc93d32eb43f77dc893e6c6cb020b5118808483c3e5e8d3ee4cf66b9cf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in full-stack-recruitment-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3aec8517fa64d31641e62204ea4d398fdc230c44b8762289cfb3fe89a690aeec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...