Malicious code in calypso-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f91f51457583618030507311d9163d984ed5582cc30846a8ba780131d6823879 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ezcolor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14686eb8b73cb1b789f94e4e58993478025e236c7e9fafeeda25a073b1a7760e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in adidas-github-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28226fc9d38372cbe92f7985bb3e187f7c0b05278acac32be1d2bbfaf7cda2e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kubeflow-pipelines (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b48fb3f0a2da611129fdadc65a4bb98ea67f4427bf3f7707de95c4b80ccb8eb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bbm-enterprise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8adff756b9b1415f9a70c8273fea0bc9454bc3b33abb4efb2778559d480cdcb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pilcom2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb0d01193681652f1ed0ceff555ad4f85258d1bd0c3f9f32649210454205d41d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bundle-cryp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68e5e93c567878bc6b19bc6773caab5b8bb228ebe198a31386e7131754aeb937 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Wavlink AC3000 nas.cgi set_ftp_cfg() Configuration Control Vulnerabilities

Talos Vulnerability Report TALOS-2024-2056 Wavlink AC3000 nas.cgi setftpcfg Configuration Control Vulnerabilities January 14, 2025 CVE Number CVE-2024-39788,CVE-2024-39790,CVE-2024-39789 SUMMARY Multiple external config control vulnerabilities exist in the nas.cgi setftpcfg functionality of Wavli...

Malicious code in solana-transaction-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 786862cc5bb54e2a1b9307f03e4cd67b11a7325ba9c251b3695b08d8e3383c58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-0202: External Control of File Name or Path

A vulnerability was found in TCS BaNCS 10. It has been classified as problematic. This affects an unknown part of the file /REPORTS/REPORTSSHOWFILE.jsp. The manipulation of the argument FilePath leads to file inclusion. The real existence of this vulnerability is still doubted at the moment...

Malicious code in 029testnpm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c53f058112a7baff97a58e812ac2d9aa74068e78b410609b2834e6d1a4f16ea7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in data-strategy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cfbe801663c651296948ac9f501212d0f2dc63804b79fbbfbbd0534f2468018 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aws-iot-samples-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 379933a89a9078f046a3ed35489373ccc8c0e070cef4700bbd90d36f087d5569 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11933 Malicious code in @add-wallet-exchange/import-type (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 009dc7d5e85690b3a1fdfe88879a357c8277b755a5983e5e9bcadf1e2624af1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eb-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab4350e0e76a01ebf4e3e3692784f26c112499d024ac9b24f8fe322f09ceebfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in docusaurus-extensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99775db155b8a86158ff592e554afaaa639d5e3c1b467c6e374fbb1925333cbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in client-analysis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b972deca5352be5ff4ad1c1ca8d1b1da5c8f7f124ff1202510ecc3136ab617b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11908 Malicious code in windows-version-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 613ba7ede540f232f2e844b88d0e3dbdee0806c83dfbf4cf4bf4ca7a5430aa33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-54097: External Control of System or Configuration Setting

Security vulnerability in the HiView module Impact: Successful exploitation of this vulnerability may affect feature implementation and integrity...

Malicious code in @wf-ceo/utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69d9532f6b28af2ee9239943a59872699feb8d2be0455e9b0bfc67989028acaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...