MAL-2024-10948 Malicious code in thre-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4823222bd132c06ad184ec3e59942da59e35bf3ea088248a65305f89c0f1716 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rc-network (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92fa4153701892bbacd5a9c984d56b98fb7dde59df2dc84760fe47af95bad5fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10923 Malicious code in delta-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a63f8d77e78e8b2cbc3bc3bfa80ee50373c5e9eb8cd9962c51a4a0ebec4b7cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fixsolara (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72f721f96c41e95f79c4f9d2a12a8d040ae4c360e5d8e429d2ef42be2878121c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in clarity-vs-code-web-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9931dae1aea529cfab0af59c13f394053428a779eb80926016e72d7e8447b19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dashlane-vscode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79f2a48c1181725012456cc91fb5af9013cdea7e6e5b193c8cd5947f247a4d52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in maven-dependency-submission-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1381f1caf30bbc11135c6f4ffc6634a4cdeaaa63627d583675758c564c38c804 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-chat-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e1410c02449b7f9317f68317b69ec23e5601c189018c375ccdcb1d453def943 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in river-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28a856c975ffce278cd6752a94fda3cc892d9af33858cc33d5dcb4f0bdafeb62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in odin-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88fb389e44efcf715a97b223a3b5d1df5427225000fc86af2138b7bcb3934375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seller-return-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cb65c23332995d233b20a9c39f766a75b931d27ec3bb60ab9ee7a29268dce28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RUSTSEC-2024-0398 Bias of Polynomial Coefficients in Secret Sharing

Affected versions of this crate allowed for a bias when generating random polynomials for Shamir Secret Sharing, where instead of being within the range 0, 255 they were instead in the range 1, 255. A description from Cure53, who originally found the issue, is available: The correct method to...

Malicious code in seller-listing-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e91c83194a00c44fff119714c07ce3b46ebf9b99a33ff1d0ccfe8de8ce972ec0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sc-case-dispute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3357583fc362d3c84451a6e68a288423fd4adc4e767eaff6dbbcbb7045a26f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rn-i18n-extensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec389a5953658ea1bda762a714a07855e1761843aef44b99159036fe37c81523 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pvct-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97125a9e23577624ce75d1c18f9ef230f8dee8ab03e9122e21afcadedbf22b0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wixdevpoc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 233144e1f7875e1d1028b6101f34a5191e04312b9190d4be6ebcd51fee02c497 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10694 Malicious code in babel-plugin-istanbul-shopee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b297d163ed50548e4f9a48bd5b04af57e58f063fa67d58480f857b63b9ee0bcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in logjs4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2db9ce61ae79bc8f972d6275198581d1924f054967dfead3abccc970d1b77daf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in htp2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2f646abc54192dce6f7771d42de7321b233e28eec8e74a93f3d6ba8bfff37ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...