MAL-2022-4470 Malicious code in man-installer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56d12d9a70c6fed6bf0d505f094550612014e752bb9b9ef0742b127c1dc65de8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Session Fixation

Overview tribalsystems/zenario is a Zenario is a web-based content management system for sites with one or many languages. Affected versions of this package are vulnerable to Session Fixation such that the user session identifier authentication token is issued to the browser prior to authenticati...

AlmaLinux 9 : logrotate (ALSA-2022:8393)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2022:8393 advisory. - A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate...

MAL-2022-1412 Malicious code in babel-preset-geocaching (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51930a28ac75efda74b85ba2de6a8a191279ea0f3a36f1afa9df7928a9d9aeed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3345 Malicious code in geocaching-express-account-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fd22154955291fe6ddada5958c76a297f2e37a290111d05c984707ff2b2be18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internal-lib-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b271298f1e935433f4b43cdb97a3b1f713540d0c503abc6bab0050507a1ad5d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

logrotate: potential DoS from unprivileged users via the state file

A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an...

Moderate: logrotate security update

The logrotate utility simplifies the administration of multiple log files by allowing their automatic rotation, compression, removal, and mailing. Security Fixes: logrotate: potential DoS from unprivileged users via the state file CVE-2022-1348 For more details about the security issues, includin...

Malicious code in nab-chat-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3282e7d700011745064925e0748cac1ec1b476b97086e633a6c18a9fcc04bf2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webpack-dev-fixture (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ef02287b144b28d10ac4910d268b3a6ad2c870385d1ae85c1ec2f144b176c58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stale-props (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65b9ec16df0705291e585234cf48aa58f355eadeaf165424181e35c728757468 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7101 Malicious code in webpack-dev-fixture (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ef02287b144b28d10ac4910d268b3a6ad2c870385d1ae85c1ec2f144b176c58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-194 Malicious code in @dbk-legacy/muster (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2dba106f1b33e9cd6e24d1263fbc758882466bbf557a5164550185bea6c420af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6005 Malicious code in seller-base-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c65f77a2c50479bdb699150510efb95bd94617e17dcba014f9f624746a7b2492 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3676 Malicious code in hosseinc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc22099a4d484db0e1bde39a08cff80f99527b014682a645abc71460b32bd607 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jquery_ui_checkbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ec7cbc825e540dca6a67d1370e8c9d0cd6d3d116fce5c6fdc5f33f0a66aa780 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6607 Malicious code in toolbox_expose (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ede419116d4ae54b61ef324d9714437511898468d434e69d394be699ff73ffee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4053 Malicious code in jquery_ui_checkbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ec7cbc825e540dca6a67d1370e8c9d0cd6d3d116fce5c6fdc5f33f0a66aa780 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7006 Malicious code in vulnerablbsusuendency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96fab10f3a2d9c02f0a1da42123c2b402cdbdedeb87fd648026da5709bfbdac3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7303 Malicious code in xv_chrome (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c881a12c5927e8417299e80ccc13de9f4da2e5f6bdf2f1471bd0525c84581607 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...