Malware in metronome-ui

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in emon-testt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc3e1ddd0c9bd0c6e361f9383435fa90d24ddfb9642622862818d1aecfe88d29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wallet-watch-asset (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01675c298edf41b4d5fe21203170b72f5e72730d4f4fc10d9714a6a8fe277408 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bt-lotus-cicd/eslint-config-lotus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d77f679c79d9699e68511d896addd3fddc773bc3f89c4a8f38c6f763f68a903 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in node-hide-console-windows

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in malfex_api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf61c4d8d649d32458d1f89955b492660ca62652ac0c9410d9a9c07a54b3d546 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-25914

Due to improper restriction, authenticated attackers could retrieve and read system files of the underlying server through the XML interface. The information that can be read can lead to a full system compromise...

Malware in corporate-logger

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

PT-2023-20359 · Danfoss · Ak-Sm800A +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: Due to improper restriction, authenticated attackers could retrieve and read system files of the underlying server through the XML interface, potentially leading to a full system compromis...

Malicious code in 1ds-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc8c09b58037e1261454fe703ffc7c5929254eb97c02e35c1b5d495061d192df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @jackshanyeshuzi/curvess (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73cdcc08a034f6ca420eba8cfe6a4494cfb7f5b42c13e598a03163984d4a6f39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in very-bad-pkg

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

The vulnerability of the command-line interface of the Aruba EdgeConnect Enterprise network management platform allows a attacker to execute arbitrary code and bring the system into a fully compromised state.

The vulnerability of the command-line interface of the Aruba EdgeConnect Enterprise network management platform exists due to the lack of measures taken to neutralize special elements used in the operating system command line. Exploiting this vulnerability allows a remote attacker to execute...

Malware in fca-horizon-remaster

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in sync-https-api

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in price-record

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in fca-yukihira (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 570d6a44c1fdd0147a33b4f6d656e16f85034cd01f025749ecbbc0ebda2c03cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @cima/prism-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f49996021053433e43b19a3a4ae21a731784fc9b4d053c1ee07dea4613dd76a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-transactions-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b4aa758a82c1ef95eb8cec01a5206c1000e9ae259eab65eac788bb629690c5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-carousel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6a2785c7e8c78df5cfa8a857c26d48505e4e03213f1264005d80f26ea230cdc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...