Lucene search
+L

5651 matches found

Github Security Blog
Github Security Blog
•added 2024/06/03 6:43 p.m.•5 views

Malware in @juiggitea/cumque-nemo-quod

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/03 6:43 p.m.•4 views

Malware in @juiggitea/commodi-eius-repudiandae

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/03 6:43 p.m.•7 views

Malicious code in @juiggitea/architecto-voluptas-modi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e98cfb65f49141dbfeee3f067591407b316474e7b29c110ab5146a44c040cfca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/06/03 6:43 p.m.•3 views

Malware in @juiggitea/amet-cupiditate-fugiat

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/03 6:43 p.m.•8 views

Malicious code in @juiggitea/a-laboriosam-omnis-praesentium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73b7f742e51b1f9267457dee789b8075b86508058e76c06bb532d89c9c8d5808 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/06/03 2:16 a.m.•3 views

Malware in djs-checker

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/03 1:52 a.m.•4 views

Malware in sa-antd

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/03 12:49 a.m.•3 views

Malware in rich-relevance

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/03 12:49 a.m.•3 views

Malware in protonme

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/06/03 12:49 a.m.•4 views

Malware in cedar-snippet

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/05/21 2:08 a.m.•4 views

Malware in fetch-datas

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/05/20 5:00 a.m.•3 views

Malware in cors-parser

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/05/20 12:45 a.m.•2 views

Malware in @ozon-ob-foundation/event-bus

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/05/20 12:44 a.m.•5 views

Malware in @ozon-fe/media-player

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/05/19 11:47 p.m.•4 views

Malware in brand-adidas-design-tokens

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/05/19 11:47 p.m.•4 views

Malware in brand-adidas-asset-fonts

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
CVE
CVE
•added 2024/05/16 9:03 a.m.•113 views

CVE-2024-4181

The CVE-2024-4181 issue affects llama_index (RunGptLLM class) version 0.9.47 used by RunGpt framework to connect to LLMs. Root cause: unsafe use of eval enabling a malicious or compromised LLM hosting provider to run arbitrary commands on a client machine. Impact statements in sources indicate th...

8.8CVSS7.9AI score0.02135EPSS
SaveExploits1References2Affected Software1
Github Security Blog
Github Security Blog
•added 2024/05/15 4:50 a.m.•3 views

Malware in sigoner

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/05/13 1:00 a.m.•4 views

Malware in by-dynamic-domain

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2024/05/13 1:00 a.m.•3 views

Malware in by-logger

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder