Malicious code in amberdata-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00f87e296c2ebe96b609c852f357a35da6163c3fdfec66fab791b42c316ceb43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ai-document-translator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b38ac855d648c1b9c916704286b6a4147abf283a90107f35aaf10600caed3625 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in arm-sqlvirtualmachine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14a2084b932667f6e52786faf8f2f0708155d56015177b79b6a9c7f8954a9d75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in arm-templatespecs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 265ed71b7ec86d01a27366b7f820744537c71a0fdb61b621f22d0f6225d97b09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in synapse-access-control (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81115e92f8431e03d9f4916ec0eca880aba3fb98d918ca6e1aca89e0df7e9fe6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-machinelearningexperimentation-samples-js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0134bbb1c3b162bd3ff1a31eb6f15b75ec14670f2808ebd5adcd62a2ae21d7c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1250 Malicious code in azure-arm-machinelearningexperimentation-samples-js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0134bbb1c3b162bd3ff1a31eb6f15b75ec14670f2808ebd5adcd62a2ae21d7c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-machinelearningexperimentation-samples-ts-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28e960d07673497cdac69a46cac88d71047e5c8b724995837b47b34b8ccc828e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1251 Malicious code in azure-arm-machinelearningexperimentation-samples-ts-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28e960d07673497cdac69a46cac88d71047e5c8b724995837b47b34b8ccc828e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-oep-samples-js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e23ca07491bdf9fa618fef6a680baf08972902d40f0f70745841522db054055 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gd-user-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5f8c4667e1ba1cf0b991c3e4aa7d507fb454eff764c8d233a48cb8b81839b61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-linux-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35c4bd5ef8ff0e892a90a96125e449d042cdc2adfa37c8ff18e60499b8cf4472 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ncr-design-system/cxd-npm-releases (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 006d2f71b3519c6fc98d63cb3fe8db7b056395cb490db6a35bd2b75de7da5d12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dckvisgimhpbkhd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26f7f6c72ca3ea4fd0378193059f390bd5bfed9d6fc74dfdc29b026ea3ea3d50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in leypamfdtqqmjky (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abc0bf953ef2256ceb19f14801f0b45a3077eee7d698ff3673e63757252eb5e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in matic-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f86c86d3e42f1a874421dd446c136e620e387b8672356395e507a8517fd2b1e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2020-25459

An issue was discovered in function synctree in heterodecisiontreeguest.py in WeBank FATE Federated AI Technology Enabler 0.1 through 1.4.2 allows attackers to read sensitive information during the training process of machine learning joint modeling...

Design/Logic Flaw

An issue was discovered in function synctree in heterodecisiontreeguest.py in WeBank FATE Federated AI Technology Enabler 0.1 through 1.4.2 allows attackers to read sensitive information during the training process of machine learning joint modeling...

CVE-2020-25459

CVE-2020-25459 affects WeBank FATE (Federated AI Technology Enabler) versions 0.1–1.4.2, via the function sync_tree in hetero_decision_tree_guest.py, allowing an attacker to read sensitive information during training. Connected advisories corroborate the issue and note patches in affected project...

Attacking the Performance of Machine Learning Systems

Interesting research: "Sponge Examples: Energy-Latency Attacks on Neural Networks": Abstract: The high energy costs of neural network training and inference led to the use of acceleration hardware such as GPUs and TPUs. While such devices enable us to train large-scale neural networks in...