MAL-2022-5117 Malicious code in orangepay-ecommerce-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bea07fa6617b9081136d00c662b7e563d4f1e5c974de09e6f8556fb147a092cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6285 Malicious code in ssomicroservicefrontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7dc6def78df6060dabd36175409b0285d188b387f0f76fb10b352c6feac85647 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3565 Malicious code in has-bin-entries (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dba5e25de7a276690ce5b73aa657d8f8ef53dfcc54f531205cdb92069886e818 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6655 Malicious code in troy-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa7b7e93170b23a3db32c4befa01c8c7042f92359e4c4fd2e156981a34ceb968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2424 Malicious code in dep-incompatible (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb537c14147bd009ef50b49f0aa9e6c60e693c01b44667d8b8ce0e9a295fbbe8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4330 Malicious code in lldb-vscode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe9916629b31632e8891a1ad6e398d0a3159ec2c1ba97501fbe7f68b29e77f3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3072 Malicious code in fleetrouting-app-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63fb40b68c60d02e7e83c653ff5903afa31ef091d1911f33bef10ac62f11b2a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-40156

DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...

MAL-2022-7430 Malicious code in zlibsrc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfbf8f67470456ad6b704fb2c2d47edef71ce077afe59bf1a6f79913bde2fd5d Security researchers at Check Point Research discovered a malicious package called zlibsrc impersonating the PyPI package zlib. PyPI has since removed...

MAL-2022-7424 Malicious code in free-net-vpn2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 918a0f985a93815d37d9480f97dd5203b78834142904ae50550bd431ca52c05b Security researchers at Check Point Research discovered a malicious package called free-net-vpn2 that targets environment variables. PyPI has since remov...

Malicious code in pymocks (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7a97355d8b3b2dabe0e20f66045fa970717443f6f81e532c13d2e8bc1568dc8 Security researchers at Check Point Research discovered a malicious package called pymocks. PyPI has since removed pymocks...

MAL-2022-7426 Malicious code in pymocks (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7a97355d8b3b2dabe0e20f66045fa970717443f6f81e532c13d2e8bc1568dc8 Security researchers at Check Point Research discovered a malicious package called pymocks. PyPI has since removed pymocks...

Malicious code in ascii2text (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4a161cdfe88252de2eba4185ad1460062afc88659f928121253c995367ace33 Security researchers at Check Point Research discovered a malicious package called ascii2text impersonating the PyPI package art. PyPI has since removed...

CVE-2022-3063

DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...

CVE-2022-3022

DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...

MAL-2022-1177 Malicious code in authinit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53a474b0b923cce5aec9ec9720787b90170b22d3fe7db83600ab8cc6197d5e94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6686 Malicious code in tweetnalc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71f9e4cbb0d11b743ebd1e8942ef07fb36061f1c64940eb2caee72d983184460 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-24304

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-2564. Reason: This candidate is a duplicate of CVE-2022-2564. Notes: All CVE users should reference CVE-2022-2564 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

firefox security update

91.13.0-1.0.1 - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 91.13.0-1 - Update to 91.13.0 build1...

MAL-2022-1862 Malicious code in ceshia-node-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 904b2c5f963fd4aaf932b479caed9c77968bcb1543febf18f617babba1a2444e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...