CVE-2023-30853

Gradle Build Action allows users to execute a Gradle Build in their GitHub Actions workflow. A vulnerability impacts GitHub workflows using the Gradle Build Action prior to version 2.4.2 that have executed the Gradle Build Tool with the configuration cache enabled, potentially exposing secrets...

Malicious code in 3a-look (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9a61325b2b1ed4acb6eb7991d48682f56a090fbf84663645a94f4d8415e5b00b Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

Malicious code in nodejs-encrypt-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f59ac2ca2c204c22b2a5f11db9eef454f786803297f219aeb3e179dbe656ae07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-626 Malicious code in nlp-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ef6692095c28b968172ac45d43937a7bfe30267c7c27add946d2534ad6c7e24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nlp-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ef6692095c28b968172ac45d43937a7bfe30267c7c27add946d2534ad6c7e24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-762 Malicious code in schema2x (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cb19fe5d19843c87b53b0b52539cc74f919d82a31151b81159b41bd40b1467a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-119 Malicious code in b64-svn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c4462d12f5ac67a8c0dcfc8182a230ed7f7a51afa9722cfc8013217429517d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-85 Malicious code in airbp-cards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85909d85812d972631236bae206926985a3338e536e82a3c983e278f08c4c6c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-170 Malicious code in charlie-sql-designer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 644808c373cdee9e838e732c6ebebab68ee0108ae8502df5bab5aa95451581d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-617 Malicious code in neat_clean (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1afebf6a78e549208f1afb7e628144ad3ea178a57f5062542af37c5816330b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-681 Malicious code in photos-story-animator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 358cb47b9a08355f8b423f06a058d4a0622e10984c25cbb4411a8d6868208882 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-929 Malicious code in utils-dust (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc48096a3c9ec1e7db0ddab8489b841ccde69100000ded1c48c7cd9a87426520 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-566 Malicious code in legoland-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edff9afc6b57e71824c97058a412ca9a220f6e5c49d02d27941566658d640a4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oc-active-conversation-module-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4af2f6d15b247e3f8fc944ad0ec5d9efe55a5163b89f729f53e819289a9102e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-pop-tooltip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82e661a58f3aee5ad272c3708af6c6e28dc3abe886645d487831298be30ff64e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in il-shopify-osm-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59867423ea3b374a7842d8ca92f05a9b685f8c826bc45939ba1af80f2d088661 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-703 Malicious code in provisioner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51718d5d2a9693c9cad48841157ec3ac3d6bb311b1849970dbca255db427043d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-938 Malicious code in vibranced (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15ed6cad6ab02580f42475881d01ec0af9fa2e95362a6d3238d934065d42f65e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-705 Malicious code in proxyscrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7484e8ebffab85f3b5436045df6dfc6838e8318bd5747d1628677b19deda251d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-291 Malicious code in dreamteam11-google-tech (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7fa8233b2417c3495294e1fd0c5a031af4981dfcda1faa893025a52d760089e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...