MAL-2024-7346 Malicious code in @zitterorg/quia-quasi-voluptas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4692a97c40fb9dc47048b7597ef41fcf69d7df947c24e37c28ff7fcb91e107dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7221 Malicious code in @zitterorg/illo-accusantium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b14c41e9b36aedf4d98d0a7903eec6f7a4efde3d8aee85ee374126aff40b5104 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7088 Malicious code in orderly-omnichain-occ (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57b64418122a9d4dc72113e97a702d8b75052c00b0116af195f79b902a4b5bd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7050 Malicious code in @freetime/core-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6e1ddad8237b58e27d13a7761696892692fb82793f5f7a7bd900c6397d96dbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1673 Malicious code in gradient-tiny (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 072e069157bae3a21204a965538030cd1d107c5a79c9574cc9b663c06225b36a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1670 Malicious code in elitebots-prevnames-discord (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00d02d432c34e4cd053181ee1c3bd8e84aab59e198dacbfcfb8c88f184188c5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1655 Malicious code in imageg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df52076c4f31a1cfa37f150398316cecaf3fa4608747f701714ca329d155e6b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-Q6C7-56CQ-G2WM Rancher's RKE1 Encryption Config kept in plain-text within cluster AppliedSpec

Impact This issue is only relevant to clusters provisioned using RKE1 with secrets encryption configuration enabled. A vulnerability has been identified in which an RKE1 cluster keeps constantly reconciling when secrets encryption configuration is enabled please see the RKE documentation. When...

MAL-2024-1607 Malicious code in elasticsearch-client-specification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 135b81ee4c5cd6816ab6d993d70f307d56438812d60a3364b38638cc80b4ce68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1604 Malicious code in @yashorg/frontend-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff07f4f96c73a58bf8e1069d844465549fbe1c2a9dd169ef994b1124c5a143e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1601 Malicious code in virtuoso-web-chat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09f5be1f1f3cad8c43378afb0ddb0aed39e00e1e3169ff5e1559ab4c39d1bf06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1581 Malicious code in noblox.js-discord (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d714a330056d61b303e703615cd667da1871ff920b7563ed5d20d42d5b68c7be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1584 Malicious code in portfolio-organism-adp-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41eb756462a90039b0df22968214c17f7b6bbf6a4aaf0db84da2266a6e33813d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1574 Malicious code in code.cloudflare.ajax (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5869f17e67758b1fd6d47d84b2ab8d46f7912558ed8120de69bfc64ed5c0063d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1577 Malicious code in coe.com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b84c4d60e18fabe333d5d74a3fa2838edc6a70491dc3e9c7e3cc1d1f33e7241 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1538 Malicious code in com.unity.cloud.gltfast (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e350e8cdd404b4b5f53387437ed02152319a19e625bd4ce4c7c178848bd72e60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1526 Malicious code in testone-avisheknayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33c763adc716c4d591a2d661f71d6e12a4d2dad52c8bbc88a16da7d7948274ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1522 Malicious code in random-avishek (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02969e3f79ab835099da7fc1ca720e01142e1d7c098b4021ddb45930af85f11a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1501 Malicious code in @juiggitea/voluptatem-quos-blanditiis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3ffad47dd5e4b83c52c28d23cac90196cb72fb455eb2a08e1fdbad8dc177657 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1499 Malicious code in @juiggitea/veritatis-dicta-odit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e34344ffba345843fa39f7506c0dc9642c03d6c35e9fff45fd3f121e5f5aa00d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...