MAL-2023-923 Malicious code in usaa-input-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8473436367d09c53aaf17637b278bfba50b5d72473cb36c7a01e7029216463d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-72 Malicious code in @xivart/tangram (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22eab2391271310f3fabe0ef281b8836362a13240184bafe5326e81659a8953f Invalid Advisory This advisory has been withdrawn as the ownership has been transferred to a valid owner organization. This link is maintained to preserv...

MAL-2023-188 Malicious code in cms-external-datajs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8773c9cce6f243b82d0713bb1f4a922d2e1350f7312b64f3c46696e984b2057d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-181 Malicious code in clientcore-models-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de4f8608c64c0d2d06f8bf729f6b9a52295b62d6a69f5da36891c2fbe883b2e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-194 Malicious code in cms-ui-presentationlogic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1ed28c883575b30f00714232f671ed736feb78c5dcc8ab6326d2d6eacc20466 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-192 Malicious code in cms-typed-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e09011747adf2ed15cf63102619f15d4324bb7714e11c0d4bbb33e1eaa82284 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-596 Malicious code in milo-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86e0a528e7d78836123c80e70f5b1108807ae1c739ab8c65ad4a90702c07dab9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-663 Malicious code in owa-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a60a11fa8007678688a3a358a3af447fc85b65c2358d8799dcc1916f7504c7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-255 Malicious code in discord.js-hakai-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a908f033e96eb0d899327ba365b5e97d307772f0f8f2daa21c5edd0076b0323 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-435 Malicious code in fe-core-components-vuejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d60e569c72a226b7f460fd4ee1792523d0c53a9206b27aef9a6d2774378754ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-534 Malicious code in jiser-sp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2bd3e25c3ee0d6a560720ad7cafed6839f4aee3894b4cdcc4514631dd6fa4b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-827 Malicious code in synthetic-jiser-database (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 321d9dba211cbd5bc6fca060c3ac8011e47fc368c530ce63d5647d9a1ea5672c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RCE by Server Side Template Injection

Description Hi, During my testing, I discovered that it is possible to inject code into the system through the "first name" field. This vulnerability allows for server-side template injection, which can lead to arbitrary code execution. The impact of this vulnerability is potentially significant...

MAL-2023-61 Malicious code in @superbet-group/web.lib.flags (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 852821ee1ad9212bdcbbf1a16f7a0cd05db090379051a9725aecaf33a24e703d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-59 Malicious code in @superbet-group/martech.lib.google-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 623842b7ea3cf0abe8ef8b80d5eed291e97bcc42d9ad072da19aca5c6d3d456c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-928 Malicious code in usamaturk1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e085b7e1bf5f066d6026022820b7b037a92d4bd22cac93050d8657882b7a9e10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-884 Malicious code in thenamk3zg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52bcaf8a754f24d5679cb567cca3c9c6ab028ac369266cacf4ca6d4494f5c27b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-121 Malicious code in ban-notifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aecea46554ceaa591315411d0d3e279f9dab01878d3136b5f7a3e6e44974bb94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-328 Malicious code in fc-account-selector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2a2b9137afe6979e5b25e3e2aba4da1a9152feee7e21f1fc61c909273642d2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-858 Malicious code in testneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c5bc4adbdc90c94de1d80650508a0952b81e7cac9c2d2307982fb42be7eea49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...