MAL-2024-80 Malicious code in pp-app-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80259057c4b53406f74c4212649b483cc008da900bdde58224869875f547873c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-68 Malicious code in akshansh-jaiswal-ctf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e79dc91fb9132fecd68a7df07720fafb95435158a6e8cda639e03e9f307605e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-81 Malicious code in schibsted-style (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7fdb3f96b7ef1c18a21e73ccf0e66681bb101c779b67ef16b78444bb7ce249f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-57 Malicious code in @jitoz/encrypted-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3af49316b1efc259d2545cff00e0c101dc96335f4a8e6c3dfa80e68339674ab9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-65 Malicious code in replit-extensions-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7462f6e9b4a4fb60632168e7333f43126c172c42dbe957ea9288df7461840fa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-35 Malicious code in axis-common-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d46e6aa49acd26b8f52fc1e1d11ffa3fb20d5efa8e9648fb414a0c25aaa81480 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-50351

HCL DRYiCE MyXalytics is impacted by the use of an insecure key rotation mechanism which can allow an attacker to compromise the confidentiality or integrity of data...

CVE-2023-50351

HCL DRYiCE MyXalytics is impacted by the use of an insecure key rotation mechanism which can allow an attacker to compromise the confidentiality or integrity of data...

Design/Logic Flaw

HCL DRYiCE MyXalytics is impacted by the use of an insecure key rotation mechanism which can allow an attacker to compromise the confidentiality or integrity of data...

CVE-2023-50351 Insecure key rotation affects MyXalytics

HCL DRYiCE MyXalytics is impacted by the use of an insecure key rotation mechanism which can allow an attacker to compromise the confidentiality or integrity of data...

CVE-2023-50351

HCL DRYiCE MyXalytics is identified as impacted by an insecure key rotation mechanism, per CVE-2023-50351. Affected software: HCL DRYiCE MyXalytics (product context from multiple sources). Root cause: insecure key rotation allowing potential compromise of confidentiality and data integrity. Docum...

CVE-2023-50351 Insecure key rotation affects MyXalytics

HCL DRYiCE MyXalytics is impacted by the use of an insecure key rotation mechanism which can allow an attacker to compromise the confidentiality or integrity of data...

HCL Technologies DRYiCE MyXalytics Security Breach

HCL Technologies DRYiCE MyXalytics is a unified reporting and dashboard product from HCL Technologies, USA. A security vulnerability exists in HCL Technologies DRYiCE MyXalytics that stems from being affected by the use of an insecure key rotation mechanism that could allow an attacker to...

MAL-2024-15 Malicious code in bsc-allowance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05dca51de24dd5fe00f6891f7a049b449842a8eea930e4ffda9a41b6e3bf41a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-13921 · Hcl · Hcl Dryice Myxalytics

Name of the Vulnerable Software and Affected Versions: HCL DRYiCE MyXalytics affected versions not specified Description: The issue is related to the use of an insecure key rotation mechanism, which can allow an attacker to compromise the confidentiality or integrity of data. Recommendations: At...

MAL-2023-8777 Malicious code in sparxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9c525477f636a7370201288e33ac0e0c31a9fd3d2919fb8d165092fcf367942 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8750 Malicious code in biscits (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68cd2f1bb198e032dc091d1cca16fb8e548fca53bcacbd76cf231ea7fd569b69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8759 Malicious code in spectrum-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2eb941fc5a07c41506c9bdc68d1b469aad8f8b70b2258d975d0a6255516c5f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8714 Malicious code in unilin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7c367b1160ac199eb7e13d25743d3ab15e25f90fe30ff079ea5b82fffc17a47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8698 Malicious code in css-hell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware add41af1a627bb97a8a95ccab38f262f0d07cd937276bb7b10b01d01f4a4478d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...