Malicious code in react-native-transparent-video (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfc4c56c3c11c9b9f70d9cc95f941b8549be2b5b18c367c51ed8d531cb0f2ca6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

replaceMember&rotateMember; has no voting process

Lines of code Vulnerability details Impact The execution of the two methods replaceMember&rotateMember does not implement the voting process, which will violate the provisions of the following articles Address rotation: As a practical matter, a council member can rotate one of their own keys. Thi...

Malicious code in wasabi-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1a47529c7afca95337513fc02161d3429f5b5e4fa1ff3f80484688148b152ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1070 Malicious code in @freestarcapital/collector-pipeline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d6d60a5b8b659a55831770d4cd8f9d5ac0d59b6ae5c0e92d6305942cc40a455 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1250 Malicious code in noblox.js-ssh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54d256313b540a1d57c4e1113c411f1a40210f65c3737a5f68ea3b324e23b054 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-9JCQ-JF57-C62C Privilege escalation via ApiTokensEndpoint

Impact An attacker with access to a token with few or no scopes can query /api/0/api-tokens/ for a list of all tokens created by a user, including tokens with greater scopes, and use those tokens in other requests. There is no evidence that the issue was exploited on https://sentry.io. For...

MAL-2023-1061 Malicious code in web3tool-errors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 561512a85b3d35e7036182a3e45710bc0168b57644ed6fc0b4483443649d544c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1065 Malicious code in web3tool-net (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60b4aa14f36a7dd54f576e3021ba65925a30664f591edaf0e9a55db3cd24baf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1057 Malicious code in ethereum-cryptographyyy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb7593ecb796620e3c4b6e3e5b66e8e7efa0ddd8ce6cfab3c8e0cca35c62ce96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1055 Malicious code in @jackshanyeshuzi/curvess (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73cdcc08a034f6ca420eba8cfe6a4494cfb7f5b42c13e598a03163984d4a6f39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1059 Malicious code in my-fallen-fallen-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f31e79019d42645171a0a0457db1d85815664700b6a48f72e42d4ca92025f5da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discordd.jss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8ba506117e7c7f49158ad840669844fa4e7893e715370eb8bc3fd032617dd36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1047 Malicious code in @oyshoweb/front (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc793cbc35cbd69fb4c7bbb4873d0b7a480c013daa6e004215c2455290cab3e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Race Condition

tang is vulnerable to Race Conditions. A race condition exists in the Tang server functionality for key generation and key rotation, resulting in a small time window where Tang private keys become readable by other processes on the same host, which leads to disclosure of sensitive information...

MAL-2023-1048 Malicious code in discordd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97c4e88528a7231605ac5b8ffbae0eb705d1b7cbd05d44bc72f4d26f6b7db7fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1052 Malicious code in my-fallen-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7c1f73f0c85f62e81e5bb2b99f08089c34ecaa76487bac79f482b75c131ef13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1043 Malicious code in @kennylindahl/malicious-npm-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a736df6d5e973a80266e2c0ba35335f8e5d9fe3051f8e799c0d0cb8b1b38d97a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1044 Malicious code in noblox.js-vps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5aef3c3f76404062c2307a439ae7cbeaa4fdeb6df32555ee4146573e029d1ce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vue-router-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d2eb48e80ee684a1f36a9d44f562d8f86ed9df08286f57fdee187de71bf7010 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1034 Malicious code in fca-hrz-reup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0ffd60e2bdab5d1a78415bd3e9e825324abd5389b013ffabaaac77f4789ad54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...