Malicious code in coolblue-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fac07d2b71de3ca79060d86a07a3e16c83b66f3560e38a3be6457b24a4b0afb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-808 Malicious code in stake.fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c198061bbe55dd2f115328a3de12953984382e472f1c6044d6eb9ea36b13edb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dep_pre_install_v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9804ef6cb7b86a741d99ebe417df5a6e18e0a73658daf4932f2d8bcf4052f07d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-243 Malicious code in dependancy_confusion_test_tal3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c56293eb90ae309c58adb4cbfd852c54166ebcba11b6f6f6e5c64ce5a623c24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-227 Malicious code in data-privatelink (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2636aeb170b72bb394eb2f909679fea214cf2b85dd8cad2d6678e334e70eacd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-318 Malicious code in evolve-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f91172e8ea3922e0774dbdd5e55592c05035e0ea441f8064c3e163dd81dcd85e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hsbc-pb-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68ebe89705d558966c9f1db1e54b394a9e60bfe6e26d00f31d9d5869849954ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fi-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc495fa631684eaf2b2e11d0085de9a7332542b9bac2dfd45f640105def65103 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-773 Malicious code in shared-gatsby-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa6f8aa17394b241ea554a9745b4c06f2e6a9c3e00a5c14094b7bf4ec1b8de12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-506 Malicious code in hsbc-pb-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68ebe89705d558966c9f1db1e54b394a9e60bfe6e26d00f31d9d5869849954ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-157 Malicious code in canopy-common-fo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd983235acbe60ea7ab43744193a666e61c5bc35a50e7332217b14925f9d557c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-51 Malicious code in @playgami/portal-design-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cbc0f6c9ec3f2dc197d3ba4f4ebc88eb6cb72e8f15865b9f29bb673a82610bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-54 Malicious code in @playgami/portal-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02680029cc7be83ef6c68dbbaff4fb6d92bd8c1a71759092c1b7f625c99b786a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-48 Malicious code in @playgami/eslint-config-portal-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c59a96f0bdbc11422cdba0cabcb9398d163b3732d5d14f173849e14273bc717e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-50 Malicious code in @playgami/eslint-config-portal-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e83105996605b836f1b53a8a2f0c7d6e4178af363031bd770f6c579e8bef9c17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-49 Malicious code in @playgami/eslint-config-portal-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4be15151b5b32f83c0928b720d19807598f2d07da01e47b15a580083f99000f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-166 Malicious code in central-ui-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2782e2ac553cc54c3f260350e2d849a07145301efed884e5526b17cab6e08973 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-850 Malicious code in test-guro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ffa60c52921ed8c52fded56d2ff3c60935dd07f786cdfe7226d4eaf4873c4de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CircleCI Urges Customers to Rotate Secrets Following Security Incident

DevOps platform CircleCI on Wednesday urged its customers to rotate all their secrets following an unspecified security incident. The company said an investigation is currently ongoing, but emphasized that "there are no unauthorized actors active in our systems." Additional details are expected t...

CVE-2022-23506

Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes, and Spinnaker's Rosco microservice produces machine images. Rosco prior to versions 1.29.2, 1.28.4, and 1.27.3 does not property mask secrets generated via packer builds. This can lead to exposur...