MAL-2023-8688 Malicious code in blockchain-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a999a1b33fbea1c383e34a3e37196b2d9e96946685c3fbbff0720c1295e4bec1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8680 Malicious code in shinchina (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 967f0a4218cd8cc54f913248689a647f13975a604619d82492ee72b9a9c9f2f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8679 Malicious code in react-native-dual-pedometer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9acd69705b8c10caa5420e37e485d6406deb1e7006761f8316bdc7972c7cec69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8667 Malicious code in @huby/infovist-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6a9d9af98833f94e0e3d73a4dc90f662b96da4620bdbacdc5121e08983b066b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8664 Malicious code in testepocdep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c2fc023c3497709bfc61b6925b53473c5885c3ac0ac0b29b16ad29ce2008db6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8634 Malicious code in @lognex/services-routing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb68d761341d32450d82133ab94ed7d4f473b382988da338777e80955064a1c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8625 Malicious code in @ukncsc/my-ncsc-ui-common-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9535a39a8207d1d902daf4cfaaad312cc4bae19928fa3d2311e2be1f0ec9b027 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8614 Malicious code in tessa-npm-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e612f6e8fb0bbb74366928dddf1b34e91f54e4bef8567591fae02dc94d22461e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8611 Malicious code in docusaurus-plugin-matamohnhb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0b5b41d16d3e36f98cc25eaf6597bab9798a9b8838ff2e483cc58768a151188 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Oracle Linux 8 : tang (ELSA-2023-7022)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-7022 advisory. 7-8 - Set correct user/group tang/tang in tangd-keygen Resolves: rhbz2188743 7-7 - Fix race condition when creating/rotating keys Resolves: rhbz2182410 Resolves...

USN-6489-1 tang vulnerability

Brian McDermott discovered that Tang incorrectly handled permissions when creating/rotating keys. A local attacker could possibly use this issue to read the keys...

MAL-2023-8542 Malicious code in cobrowse-visitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfe866d98bd76a71b60029f68eefcd3158b2870ec3cf49a37fda9efa17fd05bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ubuntu 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : Tang vulnerability (USN-6489-1)

The remote Ubuntu 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6489-1 advisory. Brian McDermott discovered that Tang incorrectly handled permissions when creating/rotating keys. A local attacker could possibly...

MAL-2023-8538 Malicious code in mxtorie-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fedc7ad7359a3d2943f91008333517119b1cb29a70bd4e98c198f052229e62e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2023-1672

A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host...

MAL-2023-8531 Malicious code in vpc-nat-gateway-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9417e9eb52b089fd432e5dd38464df3ef02177d6b0d26f9fc664ef56591c4ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8529 Malicious code in f0-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d39b919f598c91daf62eb8ac34de91c6290cd75d798de1ea5f7b9c3690cab44d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Oracle Linux 9 : tang (ELSA-2023-6492)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-6492 advisory. 14-2 - Fix service start up 14-1 - New upstream release - v14. Resolves: rhbz2182411 Resolves: CVE-2023-1672 Tenable has extracted the preceding description blo...

tang: Race condition exists in the key generation and rotation functionality

A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host...

CentOS 8 : tang (CESA-2023:7022)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2023:7022 advisory. - A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys...