Malicious code in dependency-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85a60d74a7c5c26bf39fa19854d1bce3a66169cd0fe26c9e66edb7976368ed14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2436 Malicious code in dependency-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85a60d74a7c5c26bf39fa19854d1bce3a66169cd0fe26c9e66edb7976368ed14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in extraneous-dev-dep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e08815dacf458e78940833dd89e08a808779aabda6f12833e3ca42e28a3d0cdf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vscode-dependency-confusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0594ce1325ddf78cf55fd02ddf63243a2645252bc5eb813b2f60faabf444f87a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dependency-confusion-fossa-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33a2da958b0a20fbfec9aa8a6941a5d6e50de3be7b78b6348c23a465b0b9028d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6975 Malicious code in vscode-dependency-confusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0594ce1325ddf78cf55fd02ddf63243a2645252bc5eb813b2f60faabf444f87a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2433 Malicious code in dependency-confusion-fossa-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33a2da958b0a20fbfec9aa8a6941a5d6e50de3be7b78b6348c23a465b0b9028d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mock-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df9d22c356a69749e9738f4d1f21873db81a338ed813069feb8f9953171c0526 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4656 Malicious code in mock-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df9d22c356a69749e9738f4d1f21873db81a338ed813069feb8f9953171c0526 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dependency123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 327dcfe6d0167239e0fe708c0d5472bb7d8b5b6b2e6aff2e3fdb2834a88ab597 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2431 Malicious code in dependency-confusion-art-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62115c516ed6fab4f4ef04cf479f484c3cf125380339eee26945b9f78ed64cb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dependency-confusion-art-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62115c516ed6fab4f4ef04cf479f484c3cf125380339eee26945b9f78ed64cb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dependency-confusion-art-test2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e97039a56b87ce44acffa793c9c167d6d22b7044f784c8c3a6f2d634586eb8f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2432 Malicious code in dependency-confusion-art-test2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e97039a56b87ce44acffa793c9c167d6d22b7044f784c8c3a6f2d634586eb8f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in git-dependency-maker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c9b4a87b0253efbaf0122b94b2b942adc6b9163f8161863bb0d334859bb9f87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3367 Malicious code in git-dependency-maker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c9b4a87b0253efbaf0122b94b2b942adc6b9163f8161863bb0d334859bb9f87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Update initializer modifier to prevent reentrancy during initialization

Lines of code Vulnerability details Impact The solution uses: "OpenZeppelin/[email protected]". This dependency has a known high severity vulnerability: Which makes MyStrategy contract vulnerable contract MyStrategy is BaseStrategy, ReentrancyGuardUpgradeable ... function...

QueryInterface should call AddRef before returning pointer

Affected version of this crate, which is a required dependency in com-impl, provides a faulty implementation of the IUnknown::QueryInterface method. QueryInterface implementation must call IUnknown::AddRef before returning the pointer, as describe in this documentation: As it is not incrementing...

@finsemble/finsemble-electron-adapter (>=7.0.0-beta.2, <=7.0.1), @manniwatch/client-desktop (>=0.28.3, <=0.29.1) +9 more potentially affected by CVE-2022-29247 via electron (>=16.0.2, <=16.2.3)

electron NPM version =16.0.2, =7.0.0-beta.2, =0.28.3, =0.0.1, =0.0.14, =0.0.15, =2.0.56, =1.0.1, =1.0.0, =1.0.0, =0.0.1, =0.0.3 Source cves: CVE-2022-29247 Source advisory: OSV:GHSA-MQ8J-3H7H-P8G7...

@manniwatch/client-desktop (>=0.28.0, <=0.28.2), @yeti-dev/electroshot (>=1.4.3, <=1.4.6) +5 more potentially affected by CVE-2022-29247 via electron (>=15.0.0, <=15.3.7)

electron NPM version =15.0.0, =0.28.0, =1.4.3, =1.0.0, =2.0.53, =6.0.15, =6.1.2 - simple-git-gui 3.8.2 - xyz-ttooc-log-electron-windows 0.1.5 Source cves: CVE-2022-29247 Source advisory: OSV:GHSA-MQ8J-3H7H-P8G7...