Malicious code in clarity-vs-code-web-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9931dae1aea529cfab0af59c13f394053428a779eb80926016e72d7e8447b19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dashlane-vscode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79f2a48c1181725012456cc91fb5af9013cdea7e6e5b193c8cd5947f247a4d52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in maven-dependency-submission-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1381f1caf30bbc11135c6f4ffc6634a4cdeaaa63627d583675758c564c38c804 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2024-52009

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. Atlantis logs contains GitHub credentials tokens ghs... when they are rotated. This enables an attacker able to read these logs to impersonate Atlantis application and to perform actions on...

Malicious code in web-chat-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e1410c02449b7f9317f68317b69ec23e5601c189018c375ccdcb1d453def943 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in viewercontext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d130e5ac790b05038b23ecd7f937fd9b35a2ddc5696e069991b3f620e23c308 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-elm-stdio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 009716aab1cfd479b733ac360984c2ede681513ace927b45f6b7f8a65c9bb92b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in river-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28a856c975ffce278cd6752a94fda3cc892d9af33858cc33d5dcb4f0bdafeb62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in odin-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88fb389e44efcf715a97b223a3b5d1df5427225000fc86af2138b7bcb3934375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seller-return-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cb65c23332995d233b20a9c39f766a75b931d27ec3bb60ab9ee7a29268dce28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RUSTSEC-2024-0398 Bias of Polynomial Coefficients in Secret Sharing

Affected versions of this crate allowed for a bias when generating random polynomials for Shamir Secret Sharing, where instead of being within the range 0, 255 they were instead in the range 1, 255. A description from Cure53, who originally found the issue, is available: The correct method to...

Malicious code in seller-package-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34119ed9c1448fe010b34b65ac15d3bead19bc9991c34ee21e93b96c9507cd73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seller-listing-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e91c83194a00c44fff119714c07ce3b46ebf9b99a33ff1d0ccfe8de8ce972ec0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sc-case-dispute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3357583fc362d3c84451a6e68a288423fd4adc4e767eaff6dbbcbb7045a26f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rn-i18n-extensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec389a5953658ea1bda762a714a07855e1761843aef44b99159036fe37c81523 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pvct-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97125a9e23577624ce75d1c18f9ef230f8dee8ab03e9122e21afcadedbf22b0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pap-rn-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93d93d68f0c91cc33781ef291ad6e9060b27ee9050d4e4c6c4f7e5348eabef3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wixdevpoc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 233144e1f7875e1d1028b6101f34a5191e04312b9190d4be6ebcd51fee02c497 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in axios-older (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1047fb8be55bb9b1906e2bc7b0b46f5194ebb21fe15d16f8c194ddcd95083bdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10699 Malicious code in commitlint-config-marketing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a396bd7999449041603f8b1308e46dd3e47939209a438a8ce799dfa3e6406d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...