MAL-2022-953 Malicious code in amazon-ecr-data-replication-hub-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a32deab8300fe35db0ea930f79cccefb774d8da37e8bb3cd231a3658cd492189 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in amazon-ecr-data-replication-hub-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a32deab8300fe35db0ea930f79cccefb774d8da37e8bb3cd231a3658cd492189 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in looker-action-hub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f35389d9ed17b5c41a1ee92cf85272d39a149daf90ea56400034b6dcf53cd02a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4394 Malicious code in looker-action-hub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f35389d9ed17b5c41a1ee92cf85272d39a149daf90ea56400034b6dcf53cd02a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2236 Malicious code in crisis-info-hub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3a9443b0a53a572207a4269fdae2de92aefc4116d934e1fea714d1b2b12bd2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crisis-info-hub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3a9443b0a53a572207a4269fdae2de92aefc4116d934e1fea714d1b2b12bd2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6188 Malicious code in snapshot-hub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f2953f4487e86e59c5023d4a904196a114a9e6e81599f997c59c5f4666f4a2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in snapshot-hub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f2953f4487e86e59c5023d4a904196a114a9e6e81599f997c59c5f4666f4a2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @instant-api-hooks/assethub-campaigns (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3cd0ffbe2349da7aea9f042d99b1fc38ec727b62ded2bee52f82d613acfc9f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hub-project-team-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7c794f406836eb00a75225254917bf75481a01646687d3e3ee49973962b3872 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3711 Malicious code in hub-project-team-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7c794f406836eb00a75225254917bf75481a01646687d3e3ee49973962b3872 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hub-rss-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3158b4ecaff25a1c2e806a027dc70cd4f3c129c035ab63635299227ef24766b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3713 Malicious code in hub-rss-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3158b4ecaff25a1c2e806a027dc70cd4f3c129c035ab63635299227ef24766b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hub-rss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e2c3f2d68e315b2b7c48efbdcacbf670e5763f027831953c2d37200b8f2d9a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3712 Malicious code in hub-rss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e2c3f2d68e315b2b7c48efbdcacbf670e5763f027831953c2d37200b8f2d9a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-mock-hub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f97bad1e0989309a92b20d090efcfe32618ba7883318c3e3f4b17be60a558f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Unpatched Travis CI API Bug Exposes Thousands of Secret User Access Tokens

An unpatched security issue in the Travis CI API has left tens of thousands of developers' user tokens exposed to potential attacks, effectively allowing threat actors to breach cloud infrastructures, make unauthorized code changes, and initiate supply chain attacks. "More than 770 million logs o...

Microsoft Azure 安全漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Azure. The following products and versions are affected: Azure Automation State Configuration, DSC Extension, Azure...

MAL-2022-2260 Malicious code in cs-connection-hub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29eae716d8e0ba65820582f2c6f159bae978f21cd7eea64fe3e3524cd320be77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cs-connection-hub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29eae716d8e0ba65820582f2c6f159bae978f21cd7eea64fe3e3524cd320be77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...