Malicious code in ptokens-erc777-smart-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4fc4905dd4499db04626039e0832f1740c47a94321f71c7e55611e7530ffc08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3583 Malicious code in headless-obyte (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23a746248cdd3fa9fc000729a31a09edc3476b4ad4cbdec19c121fb0ca07fb77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1834 Malicious code in cartesi-subgraph (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4958d20fd8097a70078688efd874edcbc3c5500774bf3affd521a2a634b7d9fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1206 Malicious code in axelar-signing-relayer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1e055dcb45cb56b60eef5249acdc3ed71a7eea55bf8e7e10ca3875941f005b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in headless-obyte (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23a746248cdd3fa9fc000729a31a09edc3476b4ad4cbdec19c121fb0ca07fb77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4304 Malicious code in lido-cosmos-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91c734ea9798aa522386257ac88af574161a623f65bb9aa4931503a3b2d26bb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6635 Malicious code in tranchess-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7db9e2f62dee5c8b0e2fa19e620493020b43a603202dba66b929c54b2a58302 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1028 Malicious code in anyswap-rewards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2674d4a9f2b88faff228dfafb46dbd6981ccc600d7bdd4e70325623c5cf05a10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5511 Malicious code in ptokens-erc777-smart-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4fc4905dd4499db04626039e0832f1740c47a94321f71c7e55611e7530ffc08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ks-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17f45ba64efd280166d92cd3cbae66211e667608660eea775f6b2c6fad385e0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4228 Malicious code in ks-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17f45ba64efd280166d92cd3cbae66211e667608660eea775f6b2c6fad385e0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2503 Malicious code in discord.js-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62488af56327cd0a22202bb93f65eff0b4070ab64d1c9a6197f8030c66504bf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1039 Malicious code in api-discord.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4f7f7ecc3e9129636b48c01db1cb07395f0874ce212c8ad5789813123558f78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2497 Malicious code in discord.js-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8540a7a2f8830a279ceef3df3b67be2f9f9fc49b5a20fae5000a5caf839288a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in capitain-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a75b2ce6eaabce715f2a5a587ac91d0a395294ce7647cf6d0d1eb2d6e088a89 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2512 Malicious code in discord.js-selfbot-v12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1ea862e1247c0db67057d25b3765d9648b353aa808909a5faee62d64c657082 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Authorization

FlyteAdmin is the control plane for Flyte responsible for managing entities and administering workflow executions. In versions 1.1.30 and prior, authenticated users using an external identity provider can continue to use Access Tokens and ID Tokens even after they expire. Users who use FlyteAdmin...

CVE-2022-31145

Summary: CVE-2022-31145 concerns FlyteAdmin's validation of access/tokens. In versions up to 1.1.30, authenticated users with external identity providers can continue to use Access Tokens and ID Tokens after expiry. The issue does not affect users configuring FlyteAdmin as the OAuth2 Authorizatio...

MAL-2022-923 Malicious code in ajaxapis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7785c67e01de40f97f2bac6f29dc7f4b89374ff8ae9b5dc2b166f9edd9104bb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in waffles-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1844bfb21f9898d69137bb315c2e9bfb2b07a27b55a5c8962b152f8df216f980 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...