@clevyr/clevyr-dustjs-helpers (0.1.1), @clevyr/clevyr-grunt-dust (0.1.0) +102 more potentially affected by unknown CVE via dustjs-linkedin (>=0.4.0, <=2.5.1)

dustjs-linkedin NPM version =0.4.0, =2.1.0, =0.0.0, =0.0.2, =0.1.0, =1.0.1, =1.2.3 - bull-ui-temp 1.0.0 - bundalo 0.2.9 and more Source cves: unknown CVE Source advisory: MEND:WS-2016-0058...

WS-2016-0058

Code injection vulnerability in Dustjs-linkedin through 2.5.1 allows array variables to be applied without escaping dangerous characters...

Prototype Pollution

dustjs-linkedin is vulnerable to prototype pollution. The vulnerability exists because prototype attributes are not properly validated which allows an attacker to inject malicious characteristics to add new properties to a JavaScript application object prototype, overwriting or contaminating the...

2gis-maps (>=2.2.4, <=3.7.0), @27works/posto (2.0.2) +282 more potentially affected by CVE-2021-4264 via dustjs-linkedin (>=0.4.0, <=2.7.5)

dustjs-linkedin NPM version =0.4.0, =2.2.4, =0.0.1, =0.2.0, =1.0.0, =0.0.1, =0.1.9, =0.1.8, =1.0.0, =1.0.27 and more Source cves: CVE-2021-4264 Source advisory: MEND:CVE-2021-4264...

MAL-2022-2618 Malicious code in dustjs-linkedin-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 873bc4ced308a324a98fca026bd90202448ab5890c03760bfddfee7251a7211e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in dustjs-linkedin-helpers

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in dustjs-linkedin-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 873bc4ced308a324a98fca026bd90202448ab5890c03760bfddfee7251a7211e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...