Malicious code in @nexthink/content-sharing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49bb7df501231c08b51dd6be1a8222f5b5646daee9e118aeee5c15a620f99596 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-462 Malicious code in @nexthink/data-formatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f188943d8227d8913a6413c93f5a6c9f6e0246b043ca4ff832de679014a59b06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-459 Malicious code in @nexthink/arm-jwt-decoder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51df48a51ecff12b69c9a30fb95f37dcd19cbf557c11e050fb5cd202e6a1d8be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nexthink/ea-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d60b0c697d1d8646d11b1ded36191c658ba88dbf0c8720c9588a866f0edc0ed6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nexthink/apollo-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware faa168f6a74af14b39193cdea04f9798ab2d20f8ad531d396b5207580e9fc5b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 4ff-lib-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c16dbacccef21f57da31243c5487f2df6e725cba9d9e291fec15951e7d6fa15f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

FlyteAdmin's Default OAuth Authorization Server secret must be rotated

Impact Users who enable the default Flyte’s authorization server without changing the default clientid hashes will be exposed to the public internet. In an effort to make enabling authentication easier for Flyte administrators, the default configuration for Flyte Admin allows access for Flyte...

GHSA-67X4-QR35-QVRM FlyteAdmin's Default OAuth Authorization Server secret must be rotated

Impact Users who enable the default Flyte’s authorization server without changing the default clientid hashes will be exposed to the public internet. In an effort to make enabling authentication easier for Flyte administrators, the default configuration for Flyte Admin allows access for Flyte...

MAL-2022-3562 Malicious code in harness-helm-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0008cf12cac94140f089a7ba2a7d297c874737f5bfbd34256de9b47b44d084bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7091 Malicious code in webcm-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 955551845e6b60e5f365bfcce33f45968362811ecfea804b34c2e2ecefcb651f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dup-glob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64b708cc446795b7fc915527c5b980edfa8ea6bf147655f4d91aa79f8e2b29fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flashloan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b318d8644a2e5f56d435a65d5df7d81c078bdf2f95b231006a90d5dc67bdb754 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6065 Malicious code in sfos-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d35db97fc7f564a72dbdff02e662109b9cd933adf377fbb61251d42f674589b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 7h3n00b2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d447e0a0abdb9a120daee768c4715f5c6e7525abefa06b9e7868a19eda7b9e65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-39 Malicious code in 5to6-exports (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 341557457bb8c37a9fe35de09fad31d239bf12cb8d137417205690870f214cac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.meta.xr.sdk.empty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e176fd9c7eeccf86b6d27ce925141cb71fe32a6454ccd43e17ada8bfda1b25f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.meta.quest.sdk.empty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73c876e578f9f409715ef627126da30f42f3e299ba698aac7fa841709b83f18a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-220 Malicious code in @dydxprotocol/solo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 414b7a58031d755b2ab4f51d6bfc4bbaf5dad684161eab9b2d1062b8d4ce22df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4418 Malicious code in luajit-stdlib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45b78e7ade789bb8def418f760cb87a5ee7cc0bf5135ba824d6de5872ef369e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in httsper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c091a7b57d9d262ce6c8a106b8d1171290f1501a9274efbdd93fcae75d3c3b18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...