MAL-2022-3516 Malicious code in gulpplumkber (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd47464aa52fd5f08a53251d7e1d15de115fd0de331656cc6d71a5f337f24d0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@hidoo/express-engine-handlebars (0.8.2), @hidoo/gulp-project-generator (0.19.0) potentially affected by CVE-2021-35065 via glob-parent (6.0.0)

glob-parent NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on glob-parent and may be impacted: - @hidoo/express-engine-handlebars 0.8.2 - @hidoo/gulp-project-generator 0.19.0 Source cves: CVE-2021-35065 Source advisory: GHSA-CJ88-88MR-9...

@hidoo/express-engine-handlebars (0.8.2), @hidoo/gulp-project-generator (0.19.0) potentially affected by CVE-2021-35065 via glob-parent (6.0.0)

glob-parent NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on glob-parent and may be impacted: - @hidoo/express-engine-handlebars 0.8.2 - @hidoo/gulp-project-generator 0.19.0 Source cves: CVE-2021-35065 Source advisory:...

Malicious Package

Overview angieslist-gulp-build-tasks is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if th...

MAL-2022-3504 Malicious code in gulp-csslint-lesss-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85982fe0ce26bdc8da8bfc26e08e0388a911ab5db3c0c43fc6a0a9633696ca62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in gulp-csslint-lesss-reporter

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in gulp-csslint-lesss-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85982fe0ce26bdc8da8bfc26e08e0388a911ab5db3c0c43fc6a0a9633696ca62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5125 Malicious code in oro-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 434e907d46d7f142669cb87e668aa0f712aefab3a149d5c724727c7872fdb52e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in oro-gulp

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in oro-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 434e907d46d7f142669cb87e668aa0f712aefab3a149d5c724727c7872fdb52e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in ux-gulp-theming

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in ux-gulp-theming (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acf7d1b2ebe5e5b7f1f7f511b711e53f72c1b309f2eaf8d14656e1e2b45d8886 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3508 Malicious code in gulp-pypugjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8269d18c3992756798836725a2cfdebc7d0ddcb0fbf1ca340210d923283ad7a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in gulp-pypugjs

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in gulp-pypugjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8269d18c3992756798836725a2cfdebc7d0ddcb0fbf1ca340210d923283ad7a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4514 Malicious code in mbed-js-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1330123c2d83359c10a783e5a52022f07a271e333cae6b762d8c6caf85d8783 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in mbed-js-gulp

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in mbed-js-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1330123c2d83359c10a783e5a52022f07a271e333cae6b762d8c6caf85d8783 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3502 Malicious code in gulp-browserify-thin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ef843cda125c2cda337af64084a57a7a79a488e977a9ec4ca912704ab2059c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in gulp-browserify-thin

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...