MAL-2024-8799 Malicious code in rbds-frill-auth0-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 150dbdfd8f858852151c86f252e31bbb62cb7fdd4afb0babf23f9817a5a222ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8771 Malicious code in hendeoir (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fc0a4c45cc830a7151b688c058b945f36100df53a7f66c505be30025dfcf391 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8769 Malicious code in gyowuie (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a3b9b3baa048f299d8b93a4ab33b070fdaefbec33091e47b98c1b8f83f14a57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8770 Malicious code in hapianoer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6b9e03085ac8b68d18a85becfd6c633f7e0645c226ab184b527099a098a57c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8754 Malicious code in car_mechanic_simulator_2014_torent_tpb_install__xwd4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4125e66178d5447a89863cbb772759ba1c2fd516d19dbc7994ad687424c9b8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8745 Malicious code in bitcoin-message (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e20fe5a331a209f88ded16d3d0a0317fb3bbd42e9b2d3177deb803a64a453728 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8810 Malicious code in wif-bitcoin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c7e0c4c13dfffd62d73e2bfdddc8c8ac3bc967eb7a87935ec05c506fc618ad2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8742 Malicious code in b39zz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f746c10520545fc8760e01769f79160c8bac10740f3d8fd44dc0c0087cf55b5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-45391 Tina search token leak via lock file in TinaCMS

Tina is an open-source content management system CMS. Sites building with Tina CMS's command line interface CLI prior to version 1.6.2 that use a search token may be vulnerable to the search token being leaked via lock file tina-lock.json. Administrators of Tina-enabled websites with search setup...

CVE-2024-45391

The CVE-2024-45391 vulnerability affects Tina CMS when using Tina CLI before version 1.6.2. A search token may be leaked via the tina-lock.json lock file. The issue is mitigated by upgrading to @tinacms/cli 1.6.2 and rotating the search token. If upgrading is not feasible, token rotation remains ...

CVE-2024-45391 Tina search token leak via lock file in TinaCMS

Tina is an open-source content management system CMS. Sites building with Tina CMS's command line interface CLI prior to version 1.6.2 that use a search token may be vulnerable to the search token being leaked via lock file tina-lock.json. Administrators of Tina-enabled websites with search setup...

MAL-2024-8716 Malicious code in dowload_ebok_the_secret_by_rhonda_byrne_qnyoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cde9a96d6fa88b1118bcac423a8896f2781965955282fb800fa71d98d27a46a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8722 Malicious code in muthuthehacker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9c70da09f0a152dd4b4ccda2553a4a0ed73802be2829b6fe7b5186932ae8375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8200 Malicious code in @diotoborg/culpa-reiciendis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23563562da91e02760d001e09c2a7371552beaa58b6373fc2014e9ddec4b0f28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8239 Malicious code in @diotoborg/dolore-magnam-ipsam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 189f6262c45d88ce12c02b90ec4c4d72740f3457771fd8d9cd41dac4b41bf576 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8539 Malicious code in @diotoborg/quae-vel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb02f6892551fabf8edede99a4e58de6a15242ca7681930f78ae98c4c3a3e9cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8149 Malicious code in @diotoborg/assumenda-praesentium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37b84795daa5b3678a611a1f7d54d6053f7030253e7c8f672a76f3162344f5ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8576 Malicious code in @diotoborg/quo-dolorem-ducimus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10f6bf7413a4200c00a1991c08c68a1bc2fdccf1956eb024d97cd48b1a3f9635 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8681 Malicious code in @diotoborg/veritatis-nobis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cfd98f95807096e87732ca7f266d5c87472c1f78cde19f0dbe8e57a8c894162 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8637 Malicious code in @diotoborg/soluta-cupiditate-nobis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b21f96243ce0fb98c33fe72951c197f7c20bfdd8c7d82fe06f7814fbca47c3c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...