MAL-2024-1190 Malicious code in hydrogen-sfdgspsdmq-test1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4f335f9d806c828eeddff7f8424627b1b60dd7471b65a399c2fcddb75f6634d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1192 Malicious code in package-ddgjhd-weagd-24h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cef1d69ea4430962765b6d64ea615799272b79edbeb858dff62f8113a49b9704 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1193 Malicious code in package-dfgpd-dfgdfg-24h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8791e7d1940111ec98262882ec9b4ba3bc94bd1b739f62c31ba48ae31e6310bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1181 Malicious code in shelllib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe0f8a310e6c94039b69ac79b41e0121fe70d0ec0dcc2d27627ab66084b35148 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-PWQM-X5X6-5586 Cilium has insecure IPsec transport encryption

Impact Users of IPsec transparent encryption in Cilium may be vulnerable to cryptographic attacks that render the transparent encryption ineffective. In particular, Cilium is vulnerable to the following attacks by a man-in-the-middle attacker: - Chosen plaintext attacks - Key recovery attacks -...

PT-2024-22610

Name of the Vulnerable Software and Affected Versions: Cilium versions prior to 1.13.13 Cilium versions prior to 1.14.9 Cilium versions prior to 1.15.3 Description: Cilium, a networking, observability, and security solution with an eBPF-based dataplane, has a vulnerability in its IPsec transparen...

MAL-2024-1156 Malicious code in commandlib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64d4a50bf3fdea05ae20a06941d278f50e75d47cacc332a89a31934b2cdef5c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1135 Malicious code in super-social-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acf38469c6e1fd929fce485f4b3ff1b4f3d7399422a92e8b23c61339502ad299 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1114 Malicious code in babel-preset-slick (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84d6e762e33c8c67e6c07bf7d934a1ee9d34e1d618d785817f5635d5e08a2c39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1088 Malicious code in salesforce-service-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a05b3238ddc7598095d1b1e72033916f8575b91475f84952ed92ffac09441d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1069 Malicious code in ifl-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c61d2851c227be102bd3adf8e2fd3b9636e417c5f026c3bcc2b91000551c4f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1065 Malicious code in accessibletrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8474de211a93f6609827bb3a4e63a05cba1f2124131efd6a9ddf34edb2f89ed3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1060 Malicious code in unity-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d000b4d34f837a9755c05f72318c44ba0f8cf265e46224607cedae43aea73ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Secrets Sensei: Conquering Secrets Management Challenges

In the realm of cybersecurity, the stakes are sky-high, and at its core lies secrets management — the foundational pillar upon which your security infrastructure rests. We're all familiar with the routine: safeguarding those API keys, connection strings, and certificates is non-negotiable. Howeve...

openSUSE: Security Advisory for SUSE Manager 4.3.11 Release Notes (SUSE-SU-2024:0513-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2024-1047 Malicious code in tokenspair (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ccf75851f35b0d70ab977246300e05d579dafe5efa919e96448054ea7c3c7f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1028 Malicious code in disc-web-sender (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12df226ff9607452aa9f412f4bbaffcae930e8586ee8348d0d9aa9d03238f050 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1015 Malicious code in ts-patch-moongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 499203cded6b13072f04d8e6d5705f2d5b7a8700e2904bd8ff7ab367a4ba79d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1022 Malicious code in analysis-studio-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75c17c5e49ccef1b22c2e66b608c7057f54ee1bcf3ab817c89662687dddc6f02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE-SU-2024:0513-1 Security update for SUSE Manager Server 4.3

This update fixes the following issues: release-notes-susemanager: - Update to SUSE Manager 4.3.11 Migrate from RHEL and its clones to SUSE Liberty Linux Reboot required indication for non-SUSE distributions SSH key rotation for enhanced security Configure remote command execution End of Debian 1...