Malicious code in @zitterorg/repudiandae-nihil-architecto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22255b87902f617b5f1e67cd2a57372b9a7f46d53986864e595440da3966a149 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/doloremque-occaecati-voluptatibus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc83c6afa835d2ef475071f08b8e294922f058ec46afa1a10771e8e9a26d950d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/libero-vitae-at (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e67641147d5acbd0cc7f3ed67a1bce488f7fba86ae81cb7d6db14c92ecb87e38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/cum-et (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1548216f3514e2830cd90fa38b7c874ebf73f9abeae02c027bce48e23776cf5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/nemo-atque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d9c1da21e7f18856e39379c221e5cc6b4d82f0d1ff647120db0b4e5a4396d5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/neque-repellendus-ut (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec87cc7ee6ba396ae9f496f030469560b6cb402aa4a4f55382373c175ad4bc77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/eligendi-eius-repellendus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c8ed0002af8da0a8c12b14b033630e20a61fa7a4441f6f3d4b0b4681c8a30b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/eligendi-eligendi-deserunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee455451d12c9731c009804311dabd115e95ab9cdc9e544d918a5b5af078cd85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/recusandae-explicabo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 906d4dc993ec9eaeeead75d6c6f43c680f41c4b3e1a1bb80fdcff40fb0b1545f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/repudiandae-quidem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06241bc57f5320925f66ab1506bc038df088d5600d2540aba83a38d900a0be5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/accusamus-numquam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90e6b7f30cebbb0f9723ab68abb04606f2f8afa2cb02cd32200634384636e6ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-5334 Local File Read in stitionai/devika

A local file read vulnerability exists in the stitionai/devika repository, affecting the latest version. The vulnerability is due to improper handling of the 'snapshotpath' parameter in the '/api/get-browser-snapshot' endpoint. An attacker can exploit this vulnerability by crafting a request with...

CVE-2024-5334 Local File Read in stitionai/devika

A local file read vulnerability exists in the stitionai/devika repository, affecting the latest version. The vulnerability is due to improper handling of the 'snapshotpath' parameter in the '/api/get-browser-snapshot' endpoint. An attacker can exploit this vulnerability by crafting a request with...

CVE-2024-5334

Summary of CVE-2024-5334 (Devika): A local file read vulnerability exists in the stitionai/devika repository due to improper handling of the ‘snapshot_path’ parameter in the POST/GET endpoint “/api/get-browser-snapshot.” Attackers can craft a request with a malicious snapshot_path to read arbitra...

Devika Security Breach

Stition Devika is an advanced AI software engineer at Stition USA that understands advanced human commands, breaks them down into steps, researches the relevant information, and writes code to achieve a given goal. Devika has a security vulnerability that stems from allowing external control over...

Malicious code in internal-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b2be6f0f43b615fc7cc5c7e1f674bc14906e1a598c8aadb3aeaaf9253f8f9b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in arangodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3e09e7451852efa7e3e9deea5dc6dd6e2cf678f5368a741c35b2eac846fff21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in exel-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6083dc24b3cdb6bfd02f5426aa373f2425aab6e9508e12255fc1e08133809bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PHP-SVG-Lib Code Execution

The vulnerability of the php-svg-lib library for analyzing and rendering vector graphics is related to improper external manipulation of the file name or path. Exploiting this vulnerability could allow an attacker to execute arbitrary code with insufficient protection against attacks...

CVE-2023-38520 WordPress Pinpoint Booking System plugin <= 2.9.9.3.4 - Parameter Tampering

External Control of Assumed-Immutable Web Parameter vulnerability in PINPOINT.WORLD Pinpoint Booking System allows Functionality Misuse.This issue affects Pinpoint Booking System: from n/a through 2.9.9.3.4...