MAL-2023-637 Malicious code in nokia-smp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2dd16f41855f78df40de39f97e0b9724df12d2b0f4caca18025ec16150be4a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-419 Malicious code in fca-sang-remake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c5c8aca49062d679b17dbd133060c8466e8bd81a14cccad4ef8621a0fe435b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-899 Malicious code in tpk-fca (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 647a1daab227c3356bfb3368fd4209900a6e742233d3d7db96f36f2f8fde1275 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-252 Malicious code in discord-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01cbf37f0e61d41e10843d3b280789374dfa85d1d07218a752b29e0bdc040e91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-431 Malicious code in fca-zaaraowo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f952d090291fe13fd7bf80cdc078a8d705cad8e2f02c922163e9a0adf3433b8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-668 Malicious code in paysafe-wac-web-chatbot-lib-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 607c4692c6a631f5514a914240622977d22fb3fbc467f6bdc0b132532b3454b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2020-13777

GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3. The earliest affected version is 3.6.4 2018-09-24 because of an error in a 2018-09-18 commit. Until the first key rotation, the TLS...

MAL-2023-268 Malicious code in doii.repo.tik (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2a3b246d61b93de2def7a63affccacb26c7bddff3816d751983fa3fa0f3e978 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-592 Malicious code in micro-username (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16568c3c83ac6dd335ed741695670ec423436e9f9c4070c7f200d46edc98948b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

HashiCorp Boundary 安全漏洞

HashiCorp Boundary is an open source solution from the US-based HashiCorp Inc. that automates secure identity-based user access to hosts and services across environments. A security vulnerability exists in HashiCorp Boundary that stems from the fact that new keys created by automatic rotation may...

MAL-2023-883 Malicious code in thenamk3z (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7136bd556e8bf67544b369c2583a529fc5c8dd8153920ecd46d37007562040e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-744 Malicious code in reload-glob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a9d76cc19bc57eec19d1d25f5033ac97363240cb901ec32959baf06e1c1fe3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-137 Malicious code in bolt-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e0e9750641b5f610dba33e939ceb6e12c2ed20c08c5974a909f7cdfc113f515 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-78 Malicious code in action-destinations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96505de3d3aa2e8998dd55d2d3c5571986d30ba16c8bc9971c3f9e8348264ed9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-686 Malicious code in png-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b17176dcbb2ab3f6473fcc6da65635c58f5a95f16e36be1353daf585d861964 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-30 Malicious code in @buffer-mono/non-secure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c24391afd972eb3f30c0c2a5e0ceaa4b67a2163a600a060cd41acb3d600b6467 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-535 Malicious code in johnnygaddarr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6da5d8a94c62941c14d64144f4dbd8b8080a02b3b57cfa0584c05223ae96e13a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-894 Malicious code in tokenlon-v5-subgraph (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dceb07244c9168376047cfb891dbdf3048a9003f143fe5e73fad62a14471057e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-958 Malicious code in waline-magic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a36651e1c228b2c1cc270f4d650d20db1da7126756f6ae78b407b803174a517 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-718 Malicious code in railties (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca2a029e076b6bf6c3c47bbc29d4df637c7e966d91a4e95f196e4178397daf1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...