MAL-2024-8035 Malicious code in glitchverse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 094e280c6d5677f7322c73e7c7f38c15f88a029102a253aca3fa2842ab7744e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8032 Malicious code in eslint-config-react-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fda3631232466ff38fcdeac8d90d36bcfb72f632a3055055d5e0b19ef17b500b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8027 Malicious code in @benasin_2/frontend-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4a339db60313e6c81672ce35a4c91e4a1c202c1a62cb5fff73c5a59c8fc9347 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7983 Malicious code in resumecom-validations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb71bf1cb4ba925079e4cb0146386da6304565a1d20cdb7cba37959876f36320 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7931 Malicious code in bankrate-htr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4267f910d504855f87dd36f490616399e337d10f8e3a901db263c9abf44355da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7929 Malicious code in authorization-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e2784539b8d0054bd96f31250937fce75677b82efecd893253293f97b6a585d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7972 Malicious code in make-a-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7572638a7f46c5aba994f56b064648453f7379d51eef18a8af23c44fa422403 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7952 Malicious code in dx-virtual-assistent-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b41db1f1208b92ea920b51ff3e83bf1718e6d1e551159eb752a0325961c9fd6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7944 Malicious code in customer-oauth2-token-management-utility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7470945b8ee8dd4e437867aa2317e357a5536870671edc131c9c21ee62111acc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7949 Malicious code in dk-verification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1745fd1e16f580e3835adccd705e9046e7689f97d8f503faae66b31cfd2ff89b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7989 Malicious code in taap-bernie-plugin-pendo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53711d2f163bf531869a9b6c4b90c012e6cf7c59304f4fb4acc8ddfd60386fb2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7917 Malicious code in @nc-tools/namp-cms-content-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 498a73345341328298539519a1ab07df6fb5c55c82721a0ddc259b3d2c534e07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7915 Malicious code in @fs-mco/error-translator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f40668c1855c5832f8032a2de8d5e2dd5597d95e83d685b0cdbd6363ad55830d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7996 Malicious code in towieur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a250fb3ae771fea342cc623e4a1367a52df1aafb5277e86f9448536961b78c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

There is no real fix to the security issues recently found in GitHub and other similar software

A recently discovered security issue in GitHub and other, similar, control system products seem to fit into the classic "its a feature, not a bug" category. Security researchers last week published their findings into some research of how deleted forks in GitHub work, potentially leaving the door...

MAL-2024-7863 Malicious code in @illimity/hello-world-cryptonetlabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 047ae801559f817f9ab26f82accce12613e3aec22700c0d48518a07cc2e4f694 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7853 Malicious code in personal-profile-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 136e1c2fac917aaba8df4ef32c809261914f9790cc20d8937b61e6eeccecc684 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7806 Malicious code in overflood (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2742524e3d45bc5658d4f5feb0b8e3a1260967a2770e238934fa475a7e7e211b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7725 Malicious code in xytta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 916ceecd4a8d98031aba5ab21f6606f421c47e979940df17befdf347136ec55f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7706 Malicious code in fontaway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffda95fb52df4c12dae0bb3325e18027dadc59f0af0b85175318aff095d1e1a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...