779 matches found
MAL-2024-11037 Malicious code in eslint-plugin-sls-fe-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27d5e8725b356d074bcecc1d1449ec0da5fef9ddc886c9d593dedf52a0d6f245 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eslint-plugin-sls-fe-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27d5e8725b356d074bcecc1d1449ec0da5fef9ddc886c9d593dedf52a0d6f245 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eslint-plugin-fulfillment-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e13e5cce992af1b2b7a1e02743ee91170011bb71fc2d80bb7831eecd99538a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eslint-config-sipplint (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7dcab293e5042ecbd0641a691c76d81aaf28e34d1355556e39caa8594a6ab9e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10971 Malicious code in eslint-plugin-fulfillment-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e13e5cce992af1b2b7a1e02743ee91170011bb71fc2d80bb7831eecd99538a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in listing-sc-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca7ca721c36f92794765cd58e98883bb502ec8acf998733b4ea78773c9b7868f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10750 Malicious code in listing-sc-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca7ca721c36f92794765cd58e98883bb502ec8acf998733b4ea78773c9b7868f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eslint-plugin-internal-playwright (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1777e495156cf7146557c4b12278bbf9af5efe01c047f211bda8e66eb5503f8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in appium-doc_lint (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6337 Malicious code in access-lint (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in access-lint (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @mosfe/beam-lint-config (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1818 Malicious code in @mosfe/beam-lint-config (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @fdfe/eslint-rule-svg-rrggbbaa-check (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in odyssey-lint-staged (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b408f794010d1926bb9841d26fd28c91c97d8f11d71acea664c92ccb5a06a54 The OpenSSF Package Analysis project identified 'odyssey-lint-staged' @ 9.9.5 npm as malicious. It is considered malicious because: - The packag...
MAL-2024-1145 Malicious code in odyssey-lint-staged (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b408f794010d1926bb9841d26fd28c91c97d8f11d71acea664c92ccb5a06a54 The OpenSSF Package Analysis project identified 'odyssey-lint-staged' @ 9.9.5 npm as malicious. It is considered malicious because: - The packag...
BIT-GITLAB-2021-39935
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Unauthorized external users could perform Server Side Requests via the CI Lint API...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: caddy, vexctl, kargo, prometheus-node-exporter-fips, configmap-reload-fips, crossplane-provider-aws-dynamodb, prometheus-mysqld-exporter, vault-k8s, k8ssandra-operator, secrets-store-csi-driver-provider-aws, ip-masq-agent, mc-fips, envoy-ratelimit, rekor-fips,...
rubygem-rack: crafted requests can cause shell escape sequences
A flaw was found in ruby gem-rack. This flaw allows a malicious actor to craft requests that can cause shell escape sequences to be written to the terminal via rack's Lint middleware and CommonLogger middleware. This issue can leverage these escape sequences to execute commands in the victim's...
