Malicious code in package-dfgpd-dfgdfg-24h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8791e7d1940111ec98262882ec9b4ba3bc94bd1b739f62c31ba48ae31e6310bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Arbitrary File Read

paddlepaddle is vulnerable to External Control of File Name or Path. The vulnerability is caused due to improper input validation within paddle.vision.ops.readfile, which allows an attacker to read arbitrary files on the system...

Malicious code in raydium-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 047809b4a0221ee733d518e35e840150721d191fd909cb32946b259540c2bb1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1120 Malicious code in functions-workshop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a06f38f710e6db446e87fdd3bf34a273d5dbcb0a8cfc5a9f0440ec7a498845b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test12323123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ecbea51c0b15a8930a95267ce5c77d278fbf6de9907b7550db4f80b3958ca76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-41842

A use of externally-controlled format string vulnerability CWE-134 vulnerability in Fortinet allows a privileged attacker to execute unauthorized code or commands via specially crafted command arguments...

Malicious code in attrstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a50727170dbaf38b7b8b01624914b7b9b56d7e618f7861e09108415276c8857a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

External Control Of Filename

phenx/php-svg-lib is vulnerable to External Control of Filename. The vulnerability is due to insecure handling of inline CSS font definitions, allowing an attacker to deserialize a PHAR file through the phar:// URL handler. Note that remote code execution is only possible on PHP versions less the...

CVE-2023-29181

A use of externally-controlled format string in Fortinet FortiOS 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.14, 6.0.0 through 6.0.16, FortiProxy 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, 2.0.0 through 2.0.12, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0....

MAL-2024-987 Malicious code in @globalsearch/productstub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1db9198ae58933fe0f3654bbd2ac62d4b6ec815cc26dfc7544a545c48f89864a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fdistube-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de4be92c738b6239be2832c0b9dfaa31db610310ec3ebb4d39740d8b999e6915 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-930 Malicious code in iifl_android_app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 156d2f7b729ecde4e57d57d93bf3462903c72250d963dd82e1d1a0518d4ff9a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-837 Malicious code in wlwz-2312-7401 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44e8ca9f8d568720d62fdbea947cae78ec68f2f742a3d77c3eb431b0b51d9cbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-816 Malicious code in wlwz-2312-7107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6d001df2b866bc79619e83700f49d803d47db50f59e0d1a6928673dbf1e39dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7303 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0f6032aa419ffe8a5ea80cfb2f27b7bf37cd00909d566e36aa5503b83793826 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-5906 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d493de2ab123f058c0e83e6f4967fc3ba42f5c91263eec624060b1078f0ffe1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-5406 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98f42b01ab31a06f273c8ac0dc5b11d2f9a0c2956dbfaa74cacd18d168a969f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-5905 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 034178b518013c89dce9face19889577a7bc69869fe4daf3e524f891103a8217 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-6203 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcce3a21bb8162201733ba748edf57c05f9195c23929301e5258a0dd8ea2fb51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-4808 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d451ba6fb2427818257d07af719793cfb9572e67d6e4d4a61d8f07ab65b5c2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...