MAL-2024-8881 Malicious code in noblox.js-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61f85b110e2ef99a5f7687d9a38bb17edb801829da495315d60566af54ecd9a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-39925

An issue was discovered in Vaultwarden formerly BitwardenRS 1.30.3. It lacks an offboarding process for members who leave an organization. As a result, the shared organization key is not rotated when a member departs. Consequently, the departing member, whose access should be revoked, retains a...

MAL-2024-8869 Malicious code in perf-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed5faf9cf5e130e4cbc1696ada14520f753765e17645151d1fb90e27b680f09c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8856 Malicious code in roblox-tracer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4766dbf57e00dc5b3ef46f29e17392167d207c46ccf1a6ea97fc9bcf674cb7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8854 Malicious code in evolution-ds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 319dd750e62370dfbc8bfdc0a3a2abcf5492d5a599b1a6c67a08ac126170df8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8825 Malicious code in hyperion-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfaf98b1da6db2cef1cd44d1a761b02f9c3c4e93ecfb3bf8d8ffd70570c2305e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8799 Malicious code in rbds-frill-auth0-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 150dbdfd8f858852151c86f252e31bbb62cb7fdd4afb0babf23f9817a5a222ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8769 Malicious code in gyowuie (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a3b9b3baa048f299d8b93a4ab33b070fdaefbec33091e47b98c1b8f83f14a57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8771 Malicious code in hendeoir (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fc0a4c45cc830a7151b688c058b945f36100df53a7f66c505be30025dfcf391 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8770 Malicious code in hapianoer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6b9e03085ac8b68d18a85becfd6c633f7e0645c226ab184b527099a098a57c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8754 Malicious code in car_mechanic_simulator_2014_torent_tpb_install__xwd4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4125e66178d5447a89863cbb772759ba1c2fd516d19dbc7994ad687424c9b8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8742 Malicious code in b39zz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f746c10520545fc8760e01769f79160c8bac10740f3d8fd44dc0c0087cf55b5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8810 Malicious code in wif-bitcoin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c7e0c4c13dfffd62d73e2bfdddc8c8ac3bc967eb7a87935ec05c506fc618ad2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8745 Malicious code in bitcoin-message (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e20fe5a331a209f88ded16d3d0a0317fb3bbd42e9b2d3177deb803a64a453728 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-45391 Tina search token leak via lock file in TinaCMS

Tina is an open-source content management system CMS. Sites building with Tina CMS's command line interface CLI prior to version 1.6.2 that use a search token may be vulnerable to the search token being leaked via lock file tina-lock.json. Administrators of Tina-enabled websites with search setup...

CVE-2024-45391 Tina search token leak via lock file in TinaCMS

Tina is an open-source content management system CMS. Sites building with Tina CMS's command line interface CLI prior to version 1.6.2 that use a search token may be vulnerable to the search token being leaked via lock file tina-lock.json. Administrators of Tina-enabled websites with search setup...

CVE-2024-45391

The CVE-2024-45391 vulnerability affects Tina CMS when using Tina CLI before version 1.6.2. A search token may be leaked via the tina-lock.json lock file. The issue is mitigated by upgrading to @tinacms/cli 1.6.2 and rotating the search token. If upgrading is not feasible, token rotation remains ...

MAL-2024-8716 Malicious code in dowload_ebok_the_secret_by_rhonda_byrne_qnyoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cde9a96d6fa88b1118bcac423a8896f2781965955282fb800fa71d98d27a46a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8722 Malicious code in muthuthehacker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9c70da09f0a152dd4b4ccda2553a4a0ed73802be2829b6fe7b5186932ae8375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8200 Malicious code in @diotoborg/culpa-reiciendis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23563562da91e02760d001e09c2a7371552beaa58b6373fc2014e9ddec4b0f28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...