MAL-2022-1287 Malicious code in azure-arm-signalr-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cac0476e730ced0efec0aee283995a531bf62aca080c7cd7972ed59db8d6714 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1293 Malicious code in azure-arm-support-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d95c1fb63446240c3b714ac0be6c40ccc9893a87cf6d5a99dda5650cb5dd7026 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1292 Malicious code in azure-arm-storsimple8000series-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40092f770f19a332399d5c94b87862774a710e240f6644fc95f549c3a6d2fecc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1281 Malicious code in azure-arm-resourcemover-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66f9357c207a31225a24735bdcfd23e802760ee71fc071cfe94158668c62076b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4297 Malicious code in lib-feature-flags-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e24cd9baab2f8a1b9e12ede025f1bf40f5cea61abaeb14c138b5aab1b0df3374 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2284 Malicious code in custom-script-vanilla-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84fc81c2b96e23984a6c8521174966b25105451fd5b8110b6c6244423b0c8457 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4056 Malicious code in js-access-token-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f29f1084998eda8c1dc41acf9498dece23356295d341e62f57883b8f5be2125c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-712 Malicious code in @w3-commons/js-build-resources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7872915f84a85c03dfe50e7b7cef0787845ceaad3aac20ea1c20b7a844eb01e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in youla-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3b6fd2538a87fd893e2acb253f72093c7d1b5b6eace2522148a601114b12c83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7226 Malicious code in worki-js-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd46f5982dc0d64dac7abec613ce7dbf5cf64558ca53ac0b983350a178136152 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in worki-js-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd46f5982dc0d64dac7abec613ce7dbf5cf64558ca53ac0b983350a178136152 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in external-js-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c06d2f4db7e9efc9676f195c4794c9b02fb52e277ad85db8059db8803081e15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2940 Malicious code in external-js-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c06d2f4db7e9efc9676f195c4794c9b02fb52e277ad85db8059db8803081e15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mapray-js-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3ecca8660783a4112ca158dc2fe08c66a1426982b6eb70ed4dd8094ead87466 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2869 Malicious code in ethers-js-snap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fed39a2c0c5817dd6ae76956a74c435c13481436cac3eb9d117857ad9be21af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4478 Malicious code in mapray-js-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3ecca8660783a4112ca158dc2fe08c66a1426982b6eb70ed4dd8094ead87466 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethers-js-snap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fed39a2c0c5817dd6ae76956a74c435c13481436cac3eb9d117857ad9be21af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-XVF7-4V9Q-58W6 Infinite loop in jpeg-js

The package jpeg-js before 0.4.4 is vulnerable to Denial of Service DoS where a particular piece of input will cause the program to enter an infinite loop and never return...

Infinite loop in jpeg-js

The package jpeg-js before 0.4.4 is vulnerable to Denial of Service DoS where a particular piece of input will cause the program to enter an infinite loop and never return...

08cms (1.0.0), 18a58t9c-upload (>=1.0.0, <=1.0.3) +3478 more potentially affected by CVE-2022-25851 via jpeg-js (>=0.0.1, <=0.4.3)

jpeg-js NPM version =0.0.1, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =0.0.2, =0.0.1, =0.0.3, =1.0.0-alpha.19, =0.0.2, =2.2.1, =3.4.7 - @lan/uni-libs 0.0.3 and more Source cves: CVE-2022-25851 Source advisory: OSV:GHSA-XVF7-4V9Q-58W6...