Malicious Package

Amendment This was deemed not a vulnerability. Overview dtautodevweb is a malicious package. Note: This package was uncovered by one of Snyk's automated algorithms, and was since confirmed to be a proof-of-concept package uploaded by a researcher. It has been removed from the ecosystem and does n...

MAL-2023-134 Malicious code in biputils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3bd6095c684fe80e02dad8578e2dbbc75e183a70fbb1753752fffa06065e7b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-128 Malicious code in best-man-fast (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15fa50f52202384b37b1b714460696e713ae0766713264f909b1a18d42847bea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-22498

DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...

MAL-2023-241 Malicious code in dependancy_confusion_test_tal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9144894e475b05fd94cf378496c85c5358f742406f2806b68542b333658eecf4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-236 Malicious code in dep_conf_tal2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81af9f674f57a93af5a9030b8e05949d3ee86a9a5fbb1c98c2ffa3c7384a7344 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-237 Malicious code in dep_confusion_test123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95f5bc391a39cd114fa8cbec14792e02dbc7fdc132c33d675e5fe104568d81d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-235 Malicious code in dep_conf_tal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f17540f057215075d86afa66455fa1f138a3e04be90742219ba083ffdb95f32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-689 Malicious code in portal-numbers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 274c5bf1b8b6d50340a45e5b6b5fc38ce8f38f3d1c1138d90dca4aa0d1e26ca3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-271 Malicious code in donuts.node-remote (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 589d937e738773f2893caf9608e4b93c3616dad1f93e5d6dc62834864e46182e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7296 Malicious code in xrpl-org-dev-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 200d97a2ec5482269915689627e76de8f5f274aadcabbdae30f3dcd313fe599b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6836 Malicious code in usaa-datepicker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89e353ae8301d46db2e23da34acd818fc3cf9f83c8bcad335c7a22849c025d74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6855 Malicious code in usaa-typography (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c459f6f99ba8293610148243ff44fd4b6810f70dcb75441158c134021cb7e95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE-SU-2022:4625-1 Security update for ca-certificates-mozilla

This update for ca-certificates-mozilla fixes the following issues: - Updated to 2.60 state of Mozilla SSL root CAs bsc1206622 Removed CAs: - Global Chambersign Root - EC-ACC - Network Solutions Certificate Authority - Staat der Nederlanden EV Root CA - SwissSign Platinum CA - G2 Added CAs: -...

PT-2022-28245 · Sentinelone · Sentinelone

Name of the Vulnerable Software and Affected Versions: SentinelOne affected versions not specified Description: Threat actors impersonated SentinelOne by uploading fake software development kits SDKs onto PyPI. These SDKs contained fully functional SentinelOne clients but also included malicious...

CVE-2022-4685

DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...

Update of ca-certificates

update to CKBI 2.58 from NSS 3.67 - removed old certificates: - Certificate "Camerfirma Global Chambersign Root" - Certificate "Cybertrust Global Root" - Certificate "Equifax Secure eBusiness CA 1" - Certificate "Equifax Secure Global eBusiness CA" - Certificate "Explicitly Distrusted DigiNotar...

CLSA-2022-1671656169 Update of ca-certificates

update to CKBI 2.58 from NSS 3.67 - removed old certificates: - Certificate "Camerfirma Global Chambersign Root" - Certificate "Cybertrust Global Root" - Certificate "Equifax Secure eBusiness CA 1" - Certificate "Equifax Secure Global eBusiness CA" - Certificate "Explicitly Distrusted DigiNotar...

MAL-2022-1123 Malicious code in arpanrizki-panpan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6b640fbdbb106e7e039396ba5e56295d4388dcf0b3a2865daaaf226affc4253 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2021-4243

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-32850. Reason: This candidate is a duplicate of CVE-2021-32850. Notes: All CVE users should reference CVE-2021-32850 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...