MAL-2024-10982 Malicious code in jira-rest-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a751e385f80e321ca141ec6b1c0e58806c44bedb38b880cc1af3cb133b3c37e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seller-webchat-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ea4f9c784e3e3c7d5f98a2c973d3f87e15ae439cdd4fe1b46362551a22772cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10998 Malicious code in rct-centered-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dc6a8e05244932d5a9c6a3e845c59c4313f962558c160bf03c579325473646d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in patch-package-lucky-video (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88d9dc3ee05cdeba38d59bd671ca844e48a0497f15b16164dc9c5fe8fde4fa06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10997 Malicious code in rc-tabs-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7f90b5d41526dccacbdf635d3204ba25959ff285e798f1295c1729d0078b29f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10987 Malicious code in monorepo-release-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c63f18eff64dcaa5004e544abedb75ecf27b8fe4bd6cc8efecccf449ee5bea4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11008 Malicious code in ssc-ui-vue-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 884882e2eb31bfc360a8f498a02cc4a1ff310a8f37182b3613b74c029a8f5234 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ssc-mobile-ui-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 507d08246309bb808224e6ff0e29b7851aa213012ba3755f8417e30c9e115fde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10992 Malicious code in onboarding-ops (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6407e18f5ffaba9b33a89b526c75f2752e724200fda34ccb433db01957a188f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11013 Malicious code in tracking-wtf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f6c419e01391037aa9cad91f15a45a36a535cf2a7cee66dfe6a8814f2da5eec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in onboarding-ops (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6407e18f5ffaba9b33a89b526c75f2752e724200fda34ccb433db01957a188f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shopee-ui-react4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70d93b6f2b91bc28c44978dca8e4377993379f07ab89c0ae28f155a92bfcbc21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11005 Malicious code in shopee-ui-react4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70d93b6f2b91bc28c44978dca8e4377993379f07ab89c0ae28f155a92bfcbc21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in json-tree-preview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0892c74ee2d08c098ac37071b098b7b98d3d6e56f4ed823199117411d0538e4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10972 Malicious code in eslint-plugin-locale (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67ff7ec8f2f163238502829fc2a5fef209c1c5a8cf9d14d0b4820b1433278a81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10975 Malicious code in fulfillment-portal-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae800e3a06eddead9c751afd78539dde2e601ffb792b69421bbf36d2a6f1d87e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10986 Malicious code in malicious_sleep_package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99c56c5bd22f8ceb0fc4fb9fb6e616b108f88768dcd68a73feaaf4de3ea4ba2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-35956

Name of the Vulnerable Software and Affected Versions: go-gh versions prior to 2.11.1 Description: A security issue has been identified in go-gh that could leak authentication tokens intended for GitHub hosts to non-GitHub hosts when within a codespace. go-gh sources authentication tokens from...

MAL-2024-10984 Malicious code in kraken-wallet-cryptoicons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5445e7a104fb812aa6f8ed5418680946ff853713215035b76d12e7bdd6a19300 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in config-sdk-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e981c5877747825868f3fa52c139feb2dc49785d34e735556a425dcaf00c2802 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...