MAL-2024-1236 Malicious code in @lbnqduy11805/studious-memory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8be405b7389972c1c848ccf1ee4a873140a945c75e3593de98642061da7d5520 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1217 Malicious code in @lbnqduy11805/expert-waddle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a6c9de4a9a2e92640f7ed45ec0f7a7c36e202c83d3d062e41e96f3562f2376d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1251 Malicious code in shuaishuaiqiang (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ac0c8f14a39bde6c27443c843a6185fa0e6ad3c0117eabe24eed2b276ff3336 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1250 Malicious code in shuaishuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20d1913d5bf067f2ae6c33f0d8b2097502182b13e9c06433d248609b037005ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

U.S. Cyber Safety Board Slams Microsoft Over Breach by China-Based Hackers

The U.S. Cyber Safety Review Board CSRB has criticized Microsoft for a series of security lapses that led to the breach of nearly two dozen companies across Europe and the U.S. by a China-based nation-state group called Storm-0558 last year. The findings, released by the Department of Homeland...

MAL-2024-1192 Malicious code in package-ddgjhd-weagd-24h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cef1d69ea4430962765b6d64ea615799272b79edbeb858dff62f8113a49b9704 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1190 Malicious code in hydrogen-sfdgspsdmq-test1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4f335f9d806c828eeddff7f8424627b1b60dd7471b65a399c2fcddb75f6634d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1193 Malicious code in package-dfgpd-dfgdfg-24h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8791e7d1940111ec98262882ec9b4ba3bc94bd1b739f62c31ba48ae31e6310bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1181 Malicious code in shelllib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe0f8a310e6c94039b69ac79b41e0121fe70d0ec0dcc2d27627ab66084b35148 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-PWQM-X5X6-5586 Cilium has insecure IPsec transport encryption

Impact Users of IPsec transparent encryption in Cilium may be vulnerable to cryptographic attacks that render the transparent encryption ineffective. In particular, Cilium is vulnerable to the following attacks by a man-in-the-middle attacker: - Chosen plaintext attacks - Key recovery attacks -...

PT-2024-22610

Name of the Vulnerable Software and Affected Versions: Cilium versions prior to 1.13.13 Cilium versions prior to 1.14.9 Cilium versions prior to 1.15.3 Description: Cilium, a networking, observability, and security solution with an eBPF-based dataplane, has a vulnerability in its IPsec transparen...

MAL-2024-1156 Malicious code in commandlib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64d4a50bf3fdea05ae20a06941d278f50e75d47cacc332a89a31934b2cdef5c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1135 Malicious code in super-social-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acf38469c6e1fd929fce485f4b3ff1b4f3d7399422a92e8b23c61339502ad299 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1114 Malicious code in babel-preset-slick (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84d6e762e33c8c67e6c07bf7d934a1ee9d34e1d618d785817f5635d5e08a2c39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1088 Malicious code in salesforce-service-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a05b3238ddc7598095d1b1e72033916f8575b91475f84952ed92ffac09441d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1069 Malicious code in ifl-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c61d2851c227be102bd3adf8e2fd3b9636e417c5f026c3bcc2b91000551c4f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1065 Malicious code in accessibletrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8474de211a93f6609827bb3a4e63a05cba1f2124131efd6a9ddf34edb2f89ed3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1060 Malicious code in unity-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d000b4d34f837a9755c05f72318c44ba0f8cf265e46224607cedae43aea73ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Secrets Sensei: Conquering Secrets Management Challenges

In the realm of cybersecurity, the stakes are sky-high, and at its core lies secrets management — the foundational pillar upon which your security infrastructure rests. We're all familiar with the routine: safeguarding those API keys, connection strings, and certificates is non-negotiable. Howeve...

openSUSE: Security Advisory for SUSE Manager 4.3.11 Release Notes (SUSE-SU-2024:0513-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...