PT-2023-16458 · Hashicorp · Hashicorp Boundary

Name of the Vulnerable Software and Affected Versions: HashiCorp Boundary versions 0.10.0 through 0.11.2 Description: The issue arises when using a PKI-based worker with a Key Management Service KMS defined in the configuration file. After an automatic rotation, new credentials may not be encrypt...

MAL-2023-882 Malicious code in thenamk3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97ee1e5d0d5731dfb998b08ea8e0fcec7a494b67a2c9cd6cc36ea34b284af5c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-883 Malicious code in thenamk3z (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7136bd556e8bf67544b369c2583a529fc5c8dd8153920ecd46d37007562040e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in angular-portal-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d52cb1a168b0e9a95128e2cb22f54bf039750753cedc3fbb1012b1d968ad117 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-95 Malicious code in angular-portal-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d52cb1a168b0e9a95128e2cb22f54bf039750753cedc3fbb1012b1d968ad117 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bingads-webui-campaign/facebook-import-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21a5691da486b64faecd5c39157f18324639cdaf8a357094a80ef7088eb6c34c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-744 Malicious code in reload-glob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a9d76cc19bc57eec19d1d25f5033ac97363240cb901ec32959baf06e1c1fe3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bolt-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e0e9750641b5f610dba33e939ceb6e12c2ed20c08c5974a909f7cdfc113f515 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-137 Malicious code in bolt-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e0e9750641b5f610dba33e939ceb6e12c2ed20c08c5974a909f7cdfc113f515 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-78 Malicious code in action-destinations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96505de3d3aa2e8998dd55d2d3c5571986d30ba16c8bc9971c3f9e8348264ed9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-530 Malicious code in instantsearch-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a27501212cebbbed635898a691dbc8dedd8d342d3c41666ab78875dc496daca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-999 Malicious code in yellowbrain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8604825503353f1b309ef2c2bbb2a92faee05eac1bccfe45971c53a44b55df95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-686 Malicious code in png-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b17176dcbb2ab3f6473fcc6da65635c58f5a95f16e36be1353daf585d861964 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-30 Malicious code in @buffer-mono/non-secure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c24391afd972eb3f30c0c2a5e0ceaa4b67a2163a600a060cd41acb3d600b6467 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-908 Malicious code in ts-messenger-api-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcd86ca9e67b7044c40aab4cc9d48b42d720f8c8ed5d0a1a19d3116874e7e517 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-400 Malicious code in fca-hrz-remake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b42a9f434f83ad9b083b69c15d70efcc6a935e51b8b0e4a0ee178a7ea81592e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cloud-functions-apply-gce-sizing-recommendations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dff71f573ab0c75770c1eb1201e5e39139353eacb5afd6db5270d684e0bee416 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-150 Malicious code in bykea_node_boilerplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee7671f75f343e3ed72d88d13441eac9e2269d6399266b79952a9a1e9b25a25b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-535 Malicious code in johnnygaddarr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6da5d8a94c62941c14d64144f4dbd8b8080a02b3b57cfa0584c05223ae96e13a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-613 Malicious code in mypy-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e1b919537a89780d36cd0352b5a2a78fb75def0b31c115111e26acb0c979c0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...