Malicious code in yarn-design-system-rc-tooltip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 843c6a1e32f309a04455bd199d97770cd7c13f9fc26ab137fe28dd519efd3e9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7327 Malicious code in yarn-design-system-fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36271b16949d7666fab1ad7ffc09c9fc82404a3383c2421567ead9f1b025a988 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yarn-design-system-rc-input-number (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af670dcb9945b741b8a4b4a71a54c4da8d08032685b0db16fdfbe7847bd66d0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2878 Malicious code in ethos-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb452222ed03986bb9089d8abc2e64ad8100d354a46b6daa90ebb4494b42e718 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethos-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb452222ed03986bb9089d8abc2e64ad8100d354a46b6daa90ebb4494b42e718 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @instapro/design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1df456078704e7e82378b65eb7ad990f7760a176f671479925f6cde242d05df8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @contrast-security-inc/design-system-foundations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48b4683a6b251cef2ea9ceca8762aefd8802af287dc62ddf87ac5c19a1a4b406 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-542 Malicious code in @qualtrics-translations/qualtricsdesignsystemui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0119cbd28105b14fbc9605b5f5a0c32b096e56f842815c45d944f19f7d32f0a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2447 Malicious code in design-system-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf54fc5bdd0f75d047cec19cff91ad519eae2b7cd33b0471f1b527505df2668e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in design-system-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf54fc5bdd0f75d047cec19cff91ad519eae2b7cd33b0471f1b527505df2668e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-450 Malicious code in @ncr-design-system/cxd-npm-group (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c1057092de4a4a513e2dfc25179d2f023f8dab1939839baea98b5d1e547dffd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-451 Malicious code in @ncr-design-system/cxd-npm-releases (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 006d2f71b3519c6fc98d63cb3fe8db7b056395cb490db6a35bd2b75de7da5d12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7328 Malicious code in yarn-design-system-logos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9006849a713475d0be0ef3619338ecd191969c2f0a3d9d8d310cd68e292e75a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yarn-design-system-logos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9006849a713475d0be0ef3619338ecd191969c2f0a3d9d8d310cd68e292e75a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mollie-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e4acdc4d5f723ad8ee6225520718f124eeb148131903261e445699cbd664d21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4669 Malicious code in mollie-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e4acdc4d5f723ad8ee6225520718f124eeb148131903261e445699cbd664d21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GOV.UK Theme - Moderately critical - Cross site scripting - SA-CONTRIB-2022-027

The GOV.UK Theme govuktheme is a Drupal theme for the GOV.UK Design System. The theme doesn't sanitize user input in certain cases, which leads to Cross-Site-Scripting XSS vulnerabilities. An attacker that can create or edit certain entities or configuration may be able to exploit one or more...

@3kmfi6hp/nodejs-proxy (>=1.0.0 <=1.0.4), @aarhus-university/au-designsystem-delphinus (>=1.0.0 <=1.2.0) +342 more potentially affected by CVE-2021-21353 via pug-code-gen (>=0.0.0 <=1.1.1)

pug-code-gen NPM version =0.0.0, =1.0.0, =1.0.0, =1.0.0, =2.0.0, =0.2.0, =0.0.1, =0.0.2, =0.8.10, =0.0.9, =1.0.0, =2.1.1-alpha.1 and more Source cves: CVE-2021-21353 Source advisory: OSV:GHSA-P493-635Q-R6GR...

SQL Injection Vulnerability in Taiwan Billionaire Web Design Company's Website Building System

Taiwan Billion Web Design is a web design company. A SQL injection vulnerability exists in the web design system of Taiwan Billion Web Design Company, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Web Design System of Weili Taiwan Ltd.

Taiwan Weili Web Design Co., Ltd. is a customized web site based on customer needs, mainly promoting the suite of web design services, customers include food, electronics, computers, machinery and service industries, etc.. A SQL injection vulnerability exists in the website building system of Wei...