MAL-2024-1405 Malicious code in @juiggitea/aliquam-at-eius (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6a0ae228f56bd35003733b29db0b578ebfb21b74cc3c2fe0061cd7e091f5528 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/amet-cupiditate-fugiat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94f62fe064c189896bbcb72c87b6e37c6191013d4fa827ee24a85ba9abbcfc14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1408 Malicious code in @juiggitea/aperiam-aperiam-amet-exercitationem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c66deca8c80ee8c47f48cc07b18aa17d5676ceb0964fd672e95395ab7253d4e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1523 Malicious code in sa-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a5a47aaa26aa2c3650f0dfa9daa5f0082df771b02cf7491c1ee4254c1117d87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seller-journey-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 503e20152f64ee06b84916ab160644ed8a89c688c4562ec22c13d23732fb7b5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1503 Malicious code in antiraid-zera (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce00634d4ce27e337bddd8a3a02f3c28ecb77ff7896e01cdd9b06cbc8de8eb1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cedar-snippet (npm)

This package is considered malicious because it communicates with a domain associated with malicious activity and the package executes one or more commands associated with malicious behavior. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware...

Malicious code in nespresso-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4df4d16cd100a965fef42c58150e9688849a5acfa8de2f809b3ed66f5ef9f29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-21251 · Interaction Design Team At The University Of Applied Sciences Arts In Hildesheim/Germany +1 · Hawki

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The application does not change the session token when using the login or logout functionality. An attacker can set a session token in the victim's browser, for example via XSS, and...

Malicious code in rich-relevance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5443947e62cbe3633e1bc05cb45ee61214822d2115a1f87f6cf25a4c141d226 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1378 Malicious code in test_dependency_confusion12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b278ddd9e6c5237e992377e7fcac512039bf85125c688c1ad0dfad61caef8df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1374 Malicious code in @ozon-ob-toolbox/format-date (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99cb774b8b6118ad1c97aca951b1ac6bfc5814a661b3fea62fecd862204f47ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1372 Malicious code in @ozon-ob-foundation/event-bus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5d1a30ed3380955e93d6ee25ac05fd6a61c06bc20d670f0fd01e6a4565c82e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1369 Malicious code in mixtral-llm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8f29dbee4aa92684c9adc9e0484e255cac83931500c1651073b71123d728fd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1366 Malicious code in sigoner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2b7a5f58464c5193c5d937ef7dd00a42fa46a5b30ad2dd711d05cb143ca5132 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1359 Malicious code in by-dynamic-domain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c793f13f0128e865eaa4b39e8ccadf06126154f88e34537d0b31845a5b5f638 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1364 Malicious code in qaqazzaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a988c24a93f210f746c8d5bb91cc35523ab4d02529f4e25e1a2dfd7714ab03c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in qaqazzaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a988c24a93f210f746c8d5bb91cc35523ab4d02529f4e25e1a2dfd7714ab03c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1358 Malicious code in @asdfvr/qaqazzaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00ddae9d7021daf95bf5000e1b7f278bcf84e7b46ceba0a5ed05943b9d7ebf57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1361 Malicious code in discord-datas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdc0b10c3c3f41706cb302d6e6b02afb133f5baa93c16a2b34c6f32a6a242c22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...