Malicious code in lamia471 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5b6a082a9defb6d9d2265cf9e9dee0b5e0382c8afda6772a4ee2248d142303d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @lbnqduy11805/silver-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48fa3414b1fc4238faa198d07d0f7a8e656a706a83fae508bac516436f6860fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @lbnqduy11805/studious-memory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8be405b7389972c1c848ccf1ee4a873140a945c75e3593de98642061da7d5520 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shopify-app-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ab44e75760c84102aeb55e53e2c77bb85fc0839e0873eb6dc778f14756e0bd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-24578 RaspberryMatic Unauthenticated Remote Code Execution vulnerability through HMServer File Upload

RaspberryMatic is an open-source operating system for HomeMatic internet-of-things devices. RaspberryMatic / OCCU prior to version 3.75.6.20240316 contains a unauthenticated remote code execution RCE vulnerability, caused by multiple issues within the Java based HMIPServer.jar component...

Malicious code in zksync-hardhat-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b8c577cf7083b6313dbfbed2524851699af41517cc400559d3f451d7846f7ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hub-blockly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a569a2ddf66ac93b021560bb8b3ef62f8c0a81db49d53de3ce5e1648b68de76f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in myonlife1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afc91fc3e9b6953561e82f58838788f833d660729577e1cab84bd0cdc265aeb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-4500 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebbc9fc9b7466695fd0436db942075f375169991c1c48a2c800130ad25e1fff9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-3605 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c8e20d7791f6d48303630a98a99136a6291477da487e84b0fa772d70d69f762 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-3601 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59d98e754b174d098f797e71e1b5ac1f5ab7424a032b1c1c0a6ea0e2ba3be7ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-3505 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ab5bd305b25a413977dbbbb70fb09f9b2e8d26979296a513da4d46b2dab0467 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-362 Malicious code in wlwz-2312-2103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27c710f049b6e6ab6ec75dc0bb6938539f31296e371618290e060aa41b12992f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-0701 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bb763b3f3e8124c04be82c3c2d304cd01db01482c5a1908b2bf97ecef733ce4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-sound (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f77123d69642b2c93c33601cb76ca45905f45e0a6e25e03f1fb7fdc6caf2462 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discordjs-fetcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e59696ac0bad22dd9cbcfd3def050afd1566cc7ceb5cae53659eebeca0d368f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-0643

Unrestricted upload of dangerous file types in the C21 Live Encoder and Live Mosaic product, version 5.3. This vulnerability allows a remote attacker to upload different file extensions without any restrictions, resulting in a full system compromise...

PT-2024-15712 · Unknown · C21 Live Encoder/Live Mosaic

Name of the Vulnerable Software and Affected Versions: C21 Live Encoder and Live Mosaic product version 5.3 Description: The issue allows a remote attacker to upload different file extensions without any restrictions, resulting in a full system compromise. This is due to an unrestricted upload of...

Malicious code in @lognex/ecom-recommendations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0ab65eb1c1e53ad84ab09e9426d718197e6137500c81a66639f4e4249e39edb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fibo-num (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69de88aac3d36d27f45dcf96193e35f6431e34fb681103b540430fda434bd659 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...