django-easy-login (>=0.1.0.dev0, <=0.1.0.dev2), nemo (>=1.14.2, <=1.14.3) potentially affected by CVE-2024-45231 via django (1.11.22)

django PYPI version 1.11.22 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-easy-login =0.1.0.dev0, =1.14.2, =1.14.3 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

koalix-crm (1.12.1), nemo (1.14.1) potentially affected by CVE-2024-45231 via django (1.11.21)

django PYPI version 1.11.21 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - koalix-crm 1.12.1 - nemo 1.14.1 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

connect-telegram-bot (>=1.0.0, <=1.0.1), nemo (>=3.9.0, <=3.9.1) +1 more potentially affected by CVE-2024-45231 via django (2.2.19)

django PYPI version 2.2.19 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - connect-telegram-bot =1.0.0, =3.9.0, =1.0.3, =1.0.6 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

Malware in @diotoborg/nemo-reprehenderit

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @diotoborg/nemo-reprehenderit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4dc1bc1c432934e97b6a1fd2e19453c9d2381b91ab862b179dc8b24492333a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/nemo-voluptatibus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8745d1330fe8b20f8a676f1d834b53d6ad43ebb059d9c96d94acd7ab78dadb6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8456 Malicious code in @diotoborg/nemo-voluptatibus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8745d1330fe8b20f8a676f1d834b53d6ad43ebb059d9c96d94acd7ab78dadb6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @diotoborg/nemo-voluptatibus

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @diotoborg/natus-similique-nemo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08ea3a0d44af0ce80a8be779e4d5d744999674e21b1ae58416f3a682574478c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @diotoborg/natus-similique-nemo

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @diotoborg/totam-nemo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd88f8d859a39bf19875ed8405b9250aa13c5c21b3f1cca74834d9090172aed9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @diotoborg/totam-nemo

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @zitterorg/nemo-tenetur

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @zitterorg/nemo-tenetur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41edbd03c6d4329bed5847f9b7b947f9220ea54a02ba2b59c008f835a1118a25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7288 Malicious code in @zitterorg/nemo-dolorem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73e8836ca27430f8ae61329ae104178b492bc3a1b9a6fa5d10ed3821f0013927 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @zitterorg/nemo-dolorem

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @zitterorg/nemo-dolorem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73e8836ca27430f8ae61329ae104178b492bc3a1b9a6fa5d10ed3821f0013927 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7286 Malicious code in @zitterorg/nemo-atque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d9c1da21e7f18856e39379c221e5cc6b4d82f0d1ff647120db0b4e5a4396d5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @zitterorg/nemo-atque

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @zitterorg/placeat-nemo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d530c8423e4aaf2b74b746404a5667c393703ad6c4c4f20762badfbe9ab64269 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...