MAL-2024-8750 Malicious code in bss.bssadmin-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e0d87beb9cc534751924974d922b3916e83237ed68bd80985624b52996f874b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8745 Malicious code in bitcoin-message (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e20fe5a331a209f88ded16d3d0a0317fb3bbd42e9b2d3177deb803a64a453728 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8742 Malicious code in b39zz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f746c10520545fc8760e01769f79160c8bac10740f3d8fd44dc0c0087cf55b5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8744 Malicious code in bitcoin-address-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bb543ed42a9c4e7386578dde42e2f9f8c6274c88b87358bff00e48a6fa2ea87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8798 Malicious code in qr-image-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d5c6e98a52bcdf829064fd8ff9c8b7507f033e8c912af7a333211aa917e1d16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8810 Malicious code in wif-bitcoin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c7e0c4c13dfffd62d73e2bfdddc8c8ac3bc967eb7a87935ec05c506fc618ad2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nginerrer-web-shell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cebffceb78bdb2f84e42e92350d51334a89f0f543977e469c226c40ca2601117 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in my-css-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 298ca2272cc6f26147224e4456d149054ba81f25d334cab1333a3ac9459d3faa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-45391 Tina search token leak via lock file in TinaCMS

Tina is an open-source content management system CMS. Sites building with Tina CMS's command line interface CLI prior to version 1.6.2 that use a search token may be vulnerable to the search token being leaked via lock file tina-lock.json. Administrators of Tina-enabled websites with search setup...

CVE-2024-45391

The CVE-2024-45391 vulnerability affects Tina CMS when using Tina CLI before version 1.6.2. A search token may be leaked via the tina-lock.json lock file. The issue is mitigated by upgrading to @tinacms/cli 1.6.2 and rotating the search token. If upgrading is not feasible, token rotation remains ...

CVE-2024-45391 Tina search token leak via lock file in TinaCMS

Tina is an open-source content management system CMS. Sites building with Tina CMS's command line interface CLI prior to version 1.6.2 that use a search token may be vulnerable to the search token being leaked via lock file tina-lock.json. Administrators of Tina-enabled websites with search setup...

MAL-2024-8716 Malicious code in dowload_ebok_the_secret_by_rhonda_byrne_qnyoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cde9a96d6fa88b1118bcac423a8896f2781965955282fb800fa71d98d27a46a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8715 Malicious code in dowload_ebok_maria_theresia_by_elisabeth_badinter_w1uoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b02b0d2f160bb16f06d99e91e1cad318c5ad851691675ccd8d0b03c2533395e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in muthuhackermc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c09a7667143c706293523d827f0f87172a810da00d589eb4199a5758aed61390 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8722 Malicious code in muthuthehacker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9c70da09f0a152dd4b4ccda2553a4a0ed73802be2829b6fe7b5186932ae8375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8719 Malicious code in muthu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 685a60c5c7b1a25ac7c5953df4a74e2f9e979dab99a7225199c06ec36361b8b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/ea-sint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b95e915f94bee83c0e1641dbf02efd61167248012d21dd8ba5f690c15913a512 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8635 Malicious code in @diotoborg/sit-voluptas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66b5df872f2f927576a8a09127da72400b0228dd051f635b6572ce6765633693 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8167 Malicious code in @diotoborg/autem-vero (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 239c77c66f6ccb8f7dcbcbd73746657981045cbd106678133760ac1a486b680c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8509 Malicious code in @diotoborg/optio-maiores (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85e63734bd6e69b5e2e97d770c36121cea4539199bda93418ade7b28048470d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...