MAL-2022-3480 Malicious code in grunt-retina-img (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9aa5184d4dcea5cd3db2234a39ac0a884f63bfa99ba1c8919047d8c5349da3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grunt-retina-img (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9aa5184d4dcea5cd3db2234a39ac0a884f63bfa99ba1c8919047d8c5349da3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3479 Malicious code in grunt-retina-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ed83103eb9e61c845a6b73a155a856ed96db758a8686c6870435465a579676c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grunt-retina-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ed83103eb9e61c845a6b73a155a856ed96db758a8686c6870435465a579676c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grunt-agnitas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01b86b01a6021de948f8cc77186f640e5065625b57b69518f58e7df518fbe7c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3470 Malicious code in grunt-agnitas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01b86b01a6021de948f8cc77186f640e5065625b57b69518f58e7df518fbe7c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grunt-smartling-sdk-twitch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2caf81ae57a42fe151d806ef7a139dfe2d4a3c7a422338bb6fcd27973cf73a87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grunt-contrib-jscs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b32e165f72d6eb08455a27cabc0b1265130020165387f243000b69a01672faa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grunt-jsdoc-to-markdow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d135d391d7c609533927783c1b58db569b28c0f6cd2b7e52e5b4dd59ec131ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3471 Malicious code in grunt-backbone-typescript-accessor-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 115b154824bd13959e78a37c9aedd1573687c0ae5c3e7cc352e68c9a751984c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grunt-backbone-typescript-accessor-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 115b154824bd13959e78a37c9aedd1573687c0ae5c3e7cc352e68c9a751984c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grunt-with-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0946d8ce554c4342a4ca8846ecb6a66703712bbf720809ce3fdfade36925b648 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grunt-import-html (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ec8e51891af00720a442bc65b07916738dba4f56e5692d70fd86172e2ae699e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

css-semdiff (>=1.0.2, <=1.1.0), dtsm (>=1.0.0, <=1.1.0) +2 more potentially affected by CVE-2017-1000451 via fs-git (1.0.1)

fs-git NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on fs-git and may be impacted: - css-semdiff =1.0.2, =1.0.0, =1.1.0 - grunt-dtsm 1.0.0 - packagemanager-backend 1.0.0 Source cves: CVE-2017-1000451 Source advisory:...

OESA-2022-1638 nodejs-grunt security update

Grunt is the JavaScript task runner. Why use a task runner? In one word: automation. The less work you have to do when performing repetitive tasks like minification, compilation, unit testing, linting, etc, the easier your job becomes. After you've configured it, a task runner can do most of that...

@benningfield-group/grunt-build-angularjs (>=0.1.0, <=0.1.2), @brandonli8/grunt-config (>=0.0.0-dev.7, <=0.0.0-dev.22) +170 more potentially affected by CVE-2022-1537 via grunt (>=1.0.0, <=1.4.1)

grunt NPM version =1.0.0, =0.1.0, =0.0.0-dev.7, =0.0.16-alpha, =1.0.0, =0.1.0-ocetnik-doc-test-storybook-2017-09-06T11-14-08-299Z, =0.0.13, =1.0.0, =1.0.0, =0.0.1, =1.0.7, =1.0.1, =1.1.14 and more Source cves: CVE-2022-1537 Source advisory: GHSA-RM36-94G8-835R...

@benningfield-group/grunt-build-angularjs (>=0.1.0, <=0.1.2), @brandonli8/grunt-config (>=0.0.0-dev.7, <=0.0.0-dev.22) +170 more potentially affected by CVE-2022-1537 via grunt (>=1.0.0, <=1.4.1)

grunt NPM version =1.0.0, =0.1.0, =0.0.0-dev.7, =0.0.16-alpha, =1.0.0, =0.1.0-ocetnik-doc-test-storybook-2017-09-06T11-14-08-299Z, =0.0.13, =1.0.0, =1.0.0, =0.0.1, =1.0.7, =1.0.1, =1.1.14 and more Source cves: CVE-2022-1537 Source advisory: OSV:GHSA-RM36-94G8-835R...

3d-preview (>=1.0.0, <=1.0.1), 3dviewercomponent (1.0.0) +2597 more potentially affected by CVE-2022-1537 via grunt (>=0.2.2, <=1.4.1)

grunt NPM version =0.2.2, =1.0.0, =0.0.2, =1.0.1, =1.0.0-beta, =0.0.1, =1.0.0-alpha1, =0.1.0, =0.4.0, =0.0.9, =0.0.6, =0.12.0-edge9, =0.0.5, =0.0.2, =1.0.1 and more Source cves: CVE-2022-1537 Source advisory: MEND:CVE-2022-1537...

Grunt security vulnerabilities

Grunt is a JavaScript task runner. A security vulnerability exists in Grunt versions prior to 1.5.3, which stems from file.copy being susceptible to TOCTOU Attackers can exploit this vulnerability to perform arbitrary file writes...

@benningfield-group/grunt-build-angularjs (>=0.1.0, <=0.1.2), @brandonli8/grunt-config (>=0.0.0-dev.7, <=0.0.0-dev.22) +170 more potentially affected by CVE-2022-0436 via grunt (>=1.0.0, <=1.4.1)

grunt NPM version =1.0.0, =0.1.0, =0.0.0-dev.7, =0.0.16-alpha, =1.0.0, =0.1.0-ocetnik-doc-test-storybook-2017-09-06T11-14-08-299Z, =0.0.13, =1.0.0, =1.0.0, =0.0.1, =1.0.7, =1.0.1, =1.1.14 and more Source cves: CVE-2022-0436 Source advisory: GHSA-J383-35PM-C5H4...