MAL-2023-7946 Malicious code in @apex-ui/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4019e99da7923a93919d8a184b8ea6b720e390e1ac8d94deef47992fdcdb238 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7947 Malicious code in @bt-lotus-cicd/eslint-config-lotus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d77f679c79d9699e68511d896addd3fddc773bc3f89c4a8f38c6f763f68a903 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in frontend-effect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f99fca2bf58d400b4cf4e469118f0ff61967c8a4e29d0ec247501cf57a978428 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7955 Malicious code in frontend-effect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f99fca2bf58d400b4cf4e469118f0ff61967c8a4e29d0ec247501cf57a978428 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7950 Malicious code in discord.js-v12-lukyy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84f8bf74e566b2971105d1d8482b27bb35a3cd1aa60def4e10b9ae09a4397da8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7952 Malicious code in ductai-chatbot-community (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27c77e0ede4c194a2280a25afb09eab42f56783293849e1ceb66bb39b6f62477 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-39348 Improper log output when using GitHub Status Notifications in spinnaker

Spinnaker is an open source, multi-cloud continuous delivery platform. Log output when updating GitHub status is improperly set to FULL always. It's recommended to apply the patch and rotate the GitHub token used for github status notifications. Given that this would output github tokens to a log...

CVE-2023-39348 Improper log output when using GitHub Status Notifications in spinnaker

Spinnaker is an open source, multi-cloud continuous delivery platform. Log output when updating GitHub status is improperly set to FULL always. It's recommended to apply the patch and rotate the GitHub token used for github status notifications. Given that this would output github tokens to a log...

CVE-2023-39348 Improper log output when using GitHub Status Notifications in spinnaker

Spinnaker is an open source, multi-cloud continuous delivery platform. Log output when updating GitHub status is improperly set to FULL always. It's recommended to apply the patch and rotate the GitHub token used for github status notifications. Given that this would output github tokens to a log...

MAL-2023-7928 Malicious code in @webquote-ui/iceberg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8020f294471f2ae9d52d11a800530c0fa88579565b79ab86f36f6d3ea6df93e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7927 Malicious code in @intact-lab/ngx-iceberg-links (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55d4c2e5564fb8d843d5672f7952d370ab93e26d7c031567fc4db522c21ce0b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7918 Malicious code in cms-datocms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fac9800b3ed890acb1273186fb6afc84b6334fe3867bb6aa084305adc3310976 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cms-datocms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fac9800b3ed890acb1273186fb6afc84b6334fe3867bb6aa084305adc3310976 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7911 Malicious code in fca-mdong-remake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8aa3fe0ef5d71c1d6ecd9de7850834521703b63c9a7fd9f92cd6f8d9a887f6ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7915 Malicious code in prompt-line (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84780216359289f52e238edc996a9407278a2496bce9e616ca1d46dbf1bf8aa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7909 Malicious code in discord.js-selfbot-v14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3528a4508610b7617935e551ba3910b26524b8d515354d49c10f939bd73c3ae9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dpdgroupuk/design-space-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d6e51ab6c7050e707d28d79d239a607feea9a777c9db5f9a4765ead15613168 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1569 Malicious code in @dpdgroupuk/design-space-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d6e51ab6c7050e707d28d79d239a607feea9a777c9db5f9a4765ead15613168 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7899 Malicious code in fca-orion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd59dfedf3ade34334f9cf2dc633000689c8ecfd2cc95b32b53e7723841c0fe3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7901 Malicious code in fca-supportbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 216be1d91ea2a0a3d5d54d7033f16294c7c1df0f10f021e829986203e562d035 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...