CVE-2024-45391

The CVE-2024-45391 vulnerability affects Tina CMS when using Tina CLI before version 1.6.2. A search token may be leaked via the tina-lock.json lock file. The issue is mitigated by upgrading to @tinacms/cli 1.6.2 and rotating the search token. If upgrading is not feasible, token rotation remains ...

CVE-2024-45391 Tina search token leak via lock file in TinaCMS

Tina is an open-source content management system CMS. Sites building with Tina CMS's command line interface CLI prior to version 1.6.2 that use a search token may be vulnerable to the search token being leaked via lock file tina-lock.json. Administrators of Tina-enabled websites with search setup...

CVE-2024-45391 Tina search token leak via lock file in TinaCMS

Tina is an open-source content management system CMS. Sites building with Tina CMS's command line interface CLI prior to version 1.6.2 that use a search token may be vulnerable to the search token being leaked via lock file tina-lock.json. Administrators of Tina-enabled websites with search setup...

MAL-2024-8716 Malicious code in dowload_ebok_the_secret_by_rhonda_byrne_qnyoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cde9a96d6fa88b1118bcac423a8896f2781965955282fb800fa71d98d27a46a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8722 Malicious code in muthuthehacker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9c70da09f0a152dd4b4ccda2553a4a0ed73802be2829b6fe7b5186932ae8375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8200 Malicious code in @diotoborg/culpa-reiciendis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23563562da91e02760d001e09c2a7371552beaa58b6373fc2014e9ddec4b0f28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8239 Malicious code in @diotoborg/dolore-magnam-ipsam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 189f6262c45d88ce12c02b90ec4c4d72740f3457771fd8d9cd41dac4b41bf576 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8539 Malicious code in @diotoborg/quae-vel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb02f6892551fabf8edede99a4e58de6a15242ca7681930f78ae98c4c3a3e9cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8149 Malicious code in @diotoborg/assumenda-praesentium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37b84795daa5b3678a611a1f7d54d6053f7030253e7c8f672a76f3162344f5ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8637 Malicious code in @diotoborg/soluta-cupiditate-nobis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b21f96243ce0fb98c33fe72951c197f7c20bfdd8c7d82fe06f7814fbca47c3c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8576 Malicious code in @diotoborg/quo-dolorem-ducimus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10f6bf7413a4200c00a1991c08c68a1bc2fdccf1956eb024d97cd48b1a3f9635 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8334 Malicious code in @diotoborg/facere-nihil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff4b6c1d509cceb9ae4b8bde3da18d3563627bd1cbcef74b39b713c731b73843 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8234 Malicious code in @diotoborg/distinctio-voluptates-deleniti (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d72d0ebe7a7f56600bab8e20db6cab6d7eb15a3c074fd8a377bde515ab9acd5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8294 Malicious code in @diotoborg/est-ad (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1bf3524b360d01734e3e3f8afb998cea08c72a5e92b7cda4514e48d7c05fd6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8681 Malicious code in @diotoborg/veritatis-nobis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cfd98f95807096e87732ca7f266d5c87472c1f78cde19f0dbe8e57a8c894162 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8309 Malicious code in @diotoborg/eum-porro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d26bdf87c0594f1990953cb945d709bb52c6a61bb899d5ab0517ab899a295ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8284 Malicious code in @diotoborg/enim-explicabo-saepe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 956d6d7ca42a3a0ef4af6ef2f38e61be5c6b040bed6c4d2ddf5b5be53ac2b074 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8327 Malicious code in @diotoborg/explicabo-laboriosam-maxime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55ef48ecbc216be6aa561723cf4641349fc2cb8f1a7073c919f6e78f4cd5ddf7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8589 Malicious code in @diotoborg/ratione-eaque-explicabo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7ede9085aa19cb6c4beadce0617c17057a0be9af915bd1fa4177ffb48f2f602 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8466 Malicious code in @diotoborg/nisi-molestiae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab735ad12ce2abc69603dddbb2528d1eeaa6245075c54f28561e143d0b7ce725 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...