Malicious code in jumping-jude-made-marian-3-by-lucy-lennox-on-audiobook-full-chapters- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdd52c0bd4e2b63be3c81d5153e45ee41cb11916d25a1bce529214a8d10b923a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in the-seven-husbands-of-evelyn-hugo-by-taylor-jenkins-reid-on-iphone-new-chapters- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d240e63a84ecaa135d6aa00650d64a495646d87f589e34317a020e63cb8b0eb9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in the-ashes-of-london-marwood-and-lovett-1-by-andrew-taylor-on-ipad-full-volumes- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 097c2145981a125fa3f3ad898d922ad32b2760f65e716e2adea2192c7738eae7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in whitney-my-love-westmoreland-saga-2-by-judith-mcnaught-on-audible-new-pages- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a42f76342bafc60ed9070f98e656a9ec57e5ddbf5a972e5d216c7370219037f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in noor_ul_iman_tarjuma_quran_pdf_free_free__kv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16c6edd2df35820cb6c1d38a3fe06c9c836fe349e1aaacbc55af1a13620d4a14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grunt-heremaps-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebaf028ac6b37df270050931b5b8f28eccfbfc7f8d88bd84ca5a52919e604bc5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-85 Malicious code in airbp-cards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85909d85812d972631236bae206926985a3338e536e82a3c983e278f08c4c6c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kemnasa-sp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11e53e1596af827447edef4919e4a6f003dcb35cfd0e674d6062c2a626982249 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in opium-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32280411ef552cdf3eb62fb622c11207ddde4e1ae3a16f05858b42e124200819 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-45140

The configuration backend allows an unauthenticated user to write arbitrary data with root privileges to the storage, which could lead to unauthenticated remote code execution and full system compromise...

Malicious code in fca-tpk-vip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e23c50ef9f1a8eaa6f4edca49cc3cd5ebcc2d2e892a06844fd71c5779b6f012e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-45140: Missing Authentication for Critical Function

The configuration backend allows an unauthenticated user to write arbitrary data with root privileges to the storage, which could lead to unauthenticated remote code execution and full system compromise...

Malicious code in discord.js-v12-updated (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3de37bbf9cc617eae53807b68e85234ffba9cb109affd65d17ce5a1d922140b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-25560

DataHub is an open-source metadata platform. The AuthServiceClient which is responsible for creation of new accounts, verifying credentials, resetting them or requesting access tokens, crafts multiple JSON strings using format strings with user-controlled data. This means that an attacker may be...

CVE-2023-25560: Improper Control of Dynamically-Managed Code Resources

DataHub is an open-source metadata platform. The AuthServiceClient which is responsible for creation of new accounts, verifying credentials, resetting them or requesting access tokens, crafts multiple JSON strings using format strings with user-controlled data. This means that an attacker may be...

Malicious code in @superbet-group/web.lib.vue-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0177c1a71b6ddf84d3b320b15eb180edf94406c0f6a4f07ad0b4ca33fcbb52fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ban-notifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aecea46554ceaa591315411d0d3e279f9dab01878d3136b5f7a3e6e44974bb94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-45099

Dell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password. A malicious and privileged local attacker could potentially exploit this vulnerability, leading to a full system compromise...

CVE-2022-45099: Weak Encoding for Password

Dell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password. A malicious and privileged local attacker could potentially exploit this vulnerability, leading to a full system compromise...

Malicious code in yandex-passport-vault-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5ec06c5f507c87c261fef04893899d0656796eae3510e71635067b7912f25c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...