MAL-2024-1249 Malicious code in shuaiqiang (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90a14c62cc3d0883cc41fd87a7f5c977dfd73e615c410832cc0acbfd768d6b8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1250 Malicious code in shuaishuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20d1913d5bf067f2ae6c33f0d8b2097502182b13e9c06433d248609b037005ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1246 Malicious code in @sber-sd/assistant-web-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82069e81085e1a22a51773833e3b1a9b2b492b06fa5249a27bd12e09c329e9f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Plugin Elementor Addons by Livemesh 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in WordPress Plugin...

MAL-2024-1211 Malicious code in tokenaddress (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9025a8419e068972440e8ce7318279901ab845fea1c593ecc34fda8d7f59122d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1210 Malicious code in recxn-logs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fccd7ee6ab1ab371569d54327f1be159efb74e581af0866b91b5b724e9c4cacb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-logs-v14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6dbe55f1c7c7a2f1783114a88a3045cdb6a0b355459aa66c2c364e68f396466e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1204 Malicious code in discord-logs-v14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6dbe55f1c7c7a2f1783114a88a3045cdb6a0b355459aa66c2c364e68f396466e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lodash-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a8bd312773fbb24be9c3b0b0f20151edfa60314696b7db82861805252d9fc24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1200 Malicious code in context-hydrating (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff67bde088549900a1c4d6c993e527f335f8c00e9f4d3d9e4a37dba1a81f0658 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

U.S. Cyber Safety Board Slams Microsoft Over Breach by China-Based Hackers

The U.S. Cyber Safety Review Board CSRB has criticized Microsoft for a series of security lapses that led to the breach of nearly two dozen companies across Europe and the U.S. by a China-based nation-state group called Storm-0558 last year. The findings, released by the Department of Homeland...

MAL-2024-1192 Malicious code in package-ddgjhd-weagd-24h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cef1d69ea4430962765b6d64ea615799272b79edbeb858dff62f8113a49b9704 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1190 Malicious code in hydrogen-sfdgspsdmq-test1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4f335f9d806c828eeddff7f8424627b1b60dd7471b65a399c2fcddb75f6634d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1193 Malicious code in package-dfgpd-dfgdfg-24h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8791e7d1940111ec98262882ec9b4ba3bc94bd1b739f62c31ba48ae31e6310bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1191 Malicious code in metacord (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f338d105ac1426320dac30e9498ef2e004b76bc148bb13ba645d97ab8fae58a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1181 Malicious code in shelllib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe0f8a310e6c94039b69ac79b41e0121fe70d0ec0dcc2d27627ab66084b35148 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-PWQM-X5X6-5586 Cilium has insecure IPsec transport encryption

Impact Users of IPsec transparent encryption in Cilium may be vulnerable to cryptographic attacks that render the transparent encryption ineffective. In particular, Cilium is vulnerable to the following attacks by a man-in-the-middle attacker: - Chosen plaintext attacks - Key recovery attacks -...

PT-2024-22610

Name of the Vulnerable Software and Affected Versions: Cilium versions prior to 1.13.13 Cilium versions prior to 1.14.9 Cilium versions prior to 1.15.3 Description: Cilium, a networking, observability, and security solution with an eBPF-based dataplane, has a vulnerability in its IPsec transparen...

MAL-2024-1156 Malicious code in commandlib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64d4a50bf3fdea05ae20a06941d278f50e75d47cacc332a89a31934b2cdef5c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hessskinchecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dab9a6776a7691f00229937277c2daff6e5424beadea56b66d3b8ec5f201932 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...