MAL-2023-1456 Malicious code in 1ds-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc8c09b58037e1261454fe703ffc7c5929254eb97c02e35c1b5d495061d192df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1459 Malicious code in marketplace-ibm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2229ff8297b170086d48bec628cc6f20b8a1d8ff26af91033c0e1049a43e9cb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1468 Malicious code in ynf-dx-webpack-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ff33ef0f3340901bb0ce287a8b87f098654546d5b5883805533e7581670f64d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1447 Malicious code in hsqwe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6af02b8a41a1ba2a2897c59a9bfe66780bc83afc705127d53c22c2d463c74bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1446 Malicious code in horaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a180f896e2dd432d2280836c5441fce0ad50a403d3c7f2e6340a91addaabf9b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1440 Malicious code in react-dropzone-legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2617d06d7f7e79da19c8a24acc1e620c9a46dcf8b6a5087f482081c2badff0de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1439 Malicious code in fca-jordan-amiir (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f3b3ab4084f3845b39090f0a666fb9b5fb6898b09d11d28e4d1a25fd63e3cc8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1070 Malicious code in @freestarcapital/collector-pipeline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d6d60a5b8b659a55831770d4cd8f9d5ac0d59b6ae5c0e92d6305942cc40a455 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1065 Malicious code in web3tool-net (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60b4aa14f36a7dd54f576e3021ba65925a30664f591edaf0e9a55db3cd24baf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1057 Malicious code in ethereum-cryptographyyy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb7593ecb796620e3c4b6e3e5b66e8e7efa0ddd8ce6cfab3c8e0cca35c62ce96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1055 Malicious code in @jackshanyeshuzi/curvess (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73cdcc08a034f6ca420eba8cfe6a4494cfb7f5b42c13e598a03163984d4a6f39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1059 Malicious code in my-fallen-fallen-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f31e79019d42645171a0a0457db1d85815664700b6a48f72e42d4ca92025f5da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Race Condition

tang is vulnerable to Race Conditions. A race condition exists in the Tang server functionality for key generation and key rotation, resulting in a small time window where Tang private keys become readable by other processes on the same host, which leads to disclosure of sensitive information...

MAL-2023-1043 Malicious code in @kennylindahl/malicious-npm-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a736df6d5e973a80266e2c0ba35335f8e5d9fe3051f8e799c0d0cb8b1b38d97a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1028 Malicious code in aurora-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4392d1914575e090dacd661c28ce77f65b0f9f82c9389a1fe366f9216a09b0b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1039 Malicious code in storyblok-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44e2fc216a94eece7f4dff23344c885f24361cb497ae18d6c7dde8ba3c4d39a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1032 Malicious code in eslint-config-scp-custom-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73a0feb02dac8e9a44d4dfef753d5e64e20660b0f07333ca0660f422036d468d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1025 Malicious code in elastic-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbe3c8eb7407200d7e0976f17ba59d709e62dba4fc1291d71efa92c6761c466e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1022 Malicious code in stitch-fix-men (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0eac11d5514b7620fd60ea61fd8b8421be1caf4eedb0eab7204cb09cf9d48c43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1021 Malicious code in trino-webui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 319ac64c46d918e612d241b2c7d5f57be824b74a4da37d947f5d2b8c0bb90c3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...