MAL-2023-422 Malicious code in fca-sumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e5effa05b5d9a206eeb8b3ff81daa2287c6897c5e3d2df2aaf4d62932347a9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-656 Malicious code in opium-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32280411ef552cdf3eb62fb622c11207ddde4e1ae3a16f05858b42e124200819 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-660 Malicious code in owa-fabric-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00c697ee4df7db1ed759f515b005aa747d8b25e658b91a7f744d69bbf1e8a99e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-661 Malicious code in owa-sprite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6438db9d4289d3d8728e6308442f731128ad1d364e2d0cf6d58261f7ca7db98a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Lemur subject to insecure random generation

Overview Lemur was using insecure random generation for its example configuration file, as well as for some utilities. Impact The potentially affected generated items include: | Configuration item | Config option name if applicable | Documentation link if applicable | Rotation option | Code...

Malicious code in hardhat-web3-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 736287dd58e487359e35a7c53653af7140c45ca2919d533e02fb45b58e898dbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-492 Malicious code in hardhat-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9ecd6650e933188001d304f60e4bdc5a7820065595396fe796ba8d86eb3bda7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-493 Malicious code in hardhat-web3-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 736287dd58e487359e35a7c53653af7140c45ca2919d533e02fb45b58e898dbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-637 Malicious code in nokia-smp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2dd16f41855f78df40de39f97e0b9724df12d2b0f4caca18025ec16150be4a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-941 Malicious code in vmw-atk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b19932db9ddd83e47e8db2bfa9d4bb65d5d4ef19b7e632a168be191ee4cc54f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-22986 · Netflix · Netflix Lemur

Name of the Vulnerable Software and Affected Versions: Netflix Lemur versions prior to 1.3.2 Description: The issue is related to Netflix Lemur using insufficiently random values when generating default credentials. This may allow an attacker to guess the credentials and gain access to resources...

Malicious code in tsang-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b349833c412697b8091d1f61d201e3f3d2a4790697fb032342d7cf857782bbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-909 Malicious code in tsang-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b349833c412697b8091d1f61d201e3f3d2a4790697fb032342d7cf857782bbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-419 Malicious code in fca-sang-remake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c5c8aca49062d679b17dbd133060c8466e8bd81a14cccad4ef8621a0fe435b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-899 Malicious code in tpk-fca (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 647a1daab227c3356bfb3368fd4209900a6e742233d3d7db96f36f2f8fde1275 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-411 Malicious code in fca-kenlie-plays (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59d93bb1705f959039d5130a580ae1e1153e9e2dbbb958b1c8ecd6468035d7f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-252 Malicious code in discord-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01cbf37f0e61d41e10843d3b280789374dfa85d1d07218a752b29e0bdc040e91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-257 Malicious code in discord.js-hakaix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77a9a2cd7c616d39ba9c072e45b6a93cbf2f11ef971d4806f930d8b4118811a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-431 Malicious code in fca-zaaraowo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f952d090291fe13fd7bf80cdc078a8d705cad8e2f02c922163e9a0adf3433b8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-668 Malicious code in paysafe-wac-web-chatbot-lib-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 607c4692c6a631f5514a914240622977d22fb3fbc467f6bdc0b132532b3454b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...