MAL-2022-4187 Malicious code in klook-node-framework-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7e4d6c6021022e6b3003b4d5c34f53d48767cb50cdc35f94b30d527e19e4f11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in klook-node-framework-site (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db3790c54915e431cf9b3177bb3d1ecf05ede64d886816930b922bb93a0c0a95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4181 Malicious code in klook-node-framework-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4267822732a6d0f193fd615a76cc4ef9c1bf9aeea6a25a63e3a0b68690360e9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4184 Malicious code in klook-node-framework-device (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11e106e5fa5a93e4285478edcd432b0f8e0eff17f783c3c528314d34ad494394 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

comb 代码问题漏洞

comb is a node framework that provides a one-stop shop for frequently needed utilities. A code issue exists in Comb where the product is susceptible to prototype contamination from the mergeDeep function. The following products and versions are affected:...

Design/Logic Flaw

Summit is a node web framework. When using the PouchDB driver in the module, Summit 0.1.0 and later allows an attacker to execute arbitrary commands via the collection name...