MAL-2024-7461 Malicious code in ngentot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58fbaedf7b05410b2599b41128462eff610f2872fdb8249f71c6f7098cd174b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kinthailxzz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 021efae6a0a979d3650baa0977615beea90731fdeccd547a0fc18af8402e16eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7481 Malicious code in yorz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45c5ff0124b5fef27210916da169a670acebe845cde5013de7e183430795bcff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7451 Malicious code in imagegs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64b0ae7f15fa5e3881104b1275c61ff67ae89763b0849f1538b1f5b73d8faa8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pepek (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 568484e5dcafccae1f07b557005dd8326c220bbeb9f74a3b1f7c10148b9a77b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7449 Malicious code in hdhdh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02292ef5b2e2e530cf38c47a1b32b5f4a509ac7698dd05a227e14450ee8f58f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-31324

In hide of WindowState.java, there is a possible way to bypass tapjacking/overlay protection by launching the activity in portrait mode first and then rotating it to landscape mode. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed...

CVE-2024-39876

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP1. Affected applications do not properly handle log rotation. This could allow an unauthenticated remote attacker to cause a denial of service condition through resource exhaustion on the device...

CVE-2024-39876

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP1. Affected applications do not properly handle log rotation. This could allow an unauthenticated remote attacker to cause a denial of service condition through resource exhaustion on the device...

CVE-2024-39876

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP1. Affected applications do not properly handle log rotation. This could allow an unauthenticated remote attacker to cause a denial of service condition through resource exhaustion on the device...

CVE-2024-39876

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP1. Affected applications do not properly handle log rotation. This could allow an unauthenticated remote attacker to cause a denial of service condition through resource exhaustion on the device...

CVE-2024-39876

CVE-2024-39876 affects Siemens SINEMA Remote Connect Server: all versions before 3.2 SP1 fail to properly handle log rotation, enabling a DoS via resource exhaustion. Public documents consistently cite the vulnerability as impacting the server and describe the root cause as log-rotation handling ...

Malicious code in addcohort (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e7c7c14de394a6a49ce28fc5eac784de2b16faab93f257a8f142b5b32564bfd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7462 Malicious code in noblox-ts (npm)

This package is considered malicious because it contains a heavily obfuscated postinstall.js script with multiple stages of payload execution, resulting in the delivery of QuasarRAT. This allows command and control by a malicious actor. --- -= Per source details. Do not edit below this line.=-...

MAL-2024-7427 Malicious code in brightspot-styleguide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3c067832c2cb4a73a08be5b61a55b52eefaeec955b12175a2cb116a906673e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7773 Malicious code in lllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllll (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 062d87cd9960f0320b626d6a3a1992927ccb268cab8ce435fa6e70006be525ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ilovecats (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3dac063416a21b1f5b68745be3055deaca28e767ae22099f393799e1222dea1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7407 Malicious code in @zitterorg/vitae-non (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d396ac39fe415b823f8b908a69652a99cf9bc80b5f035f6c2a844a8d8686b328 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7243 Malicious code in @zitterorg/itaque-ab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 217d8db03885fbfc16379716c8fca9f21d84d523ae2d286a665e4b804be53883 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7161 Malicious code in @zitterorg/distinctio-hic-aliquam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fd0ebbe3a2790485a43d3ddaabef229ee180873d1862e2af781459cc8a7b39b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...