MAL-2022-2636 Malicious code in dynamic-load-sticky-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cae02f392cd1bcfcc0c014ee7fed7a90f615a4fb38ab23b0e73d06f33c72d84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-570 Malicious code in @saltstack/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75563d2d7b460d1909f992784d7e77bf0a634b676c914c03c8d4b4a9b9e79319 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-336 Malicious code in @homebrew/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0186d201de79ab5661f1e33d0e6bd9fc5399cee99c4dcdd2e447be1d77191b01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4408 Malicious code in lqxebnynzfszeuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1829a0649ca427805c3a4c823309c117cb70e69a11a5b5a550be92659ee45a98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2655 Malicious code in ebfptmozbzkpcgz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a90634d7eea1805b9fe9920d056a0af7fe89d33589009d5b29088b134cf4d95a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gtkjngikdbwkerg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8de260060264b8a31fde7c36476344783bbc413ae86bec7e206c631ea1cdc106 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4815 Malicious code in new-npm-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65b2fd34a019f9d89883600a55b8b91648b8807475b80c031803d6c3382191b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2948 Malicious code in eyeglass-embroider-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94724930de6451d501b97c2eed433b236d111abd7cb144b838825e483699a47d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in matic-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f86c86d3e42f1a874421dd446c136e620e387b8672356395e507a8517fd2b1e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-834 Malicious code in action-require-additional-reviewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ea1419f82b1feafa3e2319290049609510bd25fa0b9ec9819921de8f80aee7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-855 Malicious code in adelphi-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62529517e322d0077ccd0abb579f55691b51a840e24dbe989a19476798abadeb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1072 Malicious code in appsec-event-rules-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f5c2359f16e9ebdafe13b290501d6b07bee92c4bd3df86f2221ed0d64135a12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6389 Malicious code in sync-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4acb1678e3420191321cd1a4385ce0b4bee92a3428a42666620c96fc28a35eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2379 Malicious code in ddd-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d8f62ef9b886f760d717d97048fb305e00ee0d808ba286afabde024398a2159 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in volcan0x (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69ab3b6308934f22dd68a9a70e89a6d2c047ae41a45e55e1db7a9c92eaa5fedc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in maddysmith-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d628a677acbf07d4b86ccff9a8dcc3baefdfa6b86078f7781b4fff83c6e5d24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4949 Malicious code in npmupload_test-xxxxxxxxxxxxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8685e93d3f7de0a3e2581e6ecf6ccc777de2f3a5384e100aac638dcdd96dd4f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Design/Logic Flaw

Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Rundeck community and rundeck-enterprise docker images contained a pre-generated SSH keypair. If the idrsa.pub public key of the keypair was copied to authorizedkeys files on remote host, those hosts...

MAL-2022-4264 Malicious code in lbc-git (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d5e0e36aba3e23f480664cd7bebdb71156e08493ca3b9ff660474fdf2068b84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-247 Malicious code in @epc-libraries/kinesis-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2395684a2ae7565ee6ee411ffbdf038c8b48b3c3a2ffe473e90087627b114bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...