Malicious code in codat-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15d6ef87bdf4981301dbd1430d57248ad6a9606733d297f570edc7d22cf495c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PcVue 安全漏洞

PcVue is a reliable, secure, and powerful operational software platform from PcVue, Inc. dedicated to monitoring and controlling applications in markets such as building and campus management. A security vulnerability exists in PcVue versions 12.0 through 16.2.0 that stems from the use of the OAu...

Malicious code in acm-nano-logger-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8669771f2fb91caaf8e8b4059e9466a605b69db4766b85ce718c33d1b09999a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

libreswan: Missing PreSharedKey for connection can cause crash

A flaw was found in Libreswan. This issue causes Libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys authby=secret, and the connection cannot find a matching configured secret. When automatically added on startup using the auto= keyword,...

Malicious code in spinal-service-ticket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aae35c4e4ff6906cb7d4d11279ee76155e4fe161e95d96ecea1f4e61e9a67412 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spinal-env-viewer-plugin-group-manager-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08d905db5ba537ed47f7f0ba2189c5b72f23c0d8de78591283e86cc1c8651634 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-sunset-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 042f734df520ee49c1cf44e40629e136159746964c87533d226f02be765e956e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11131 Malicious code in communication-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca24ad613d55f6103dd8e2bc5a903d213746087f94a99f3646d3d13da75b82ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11154 Malicious code in safeness-backup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19bf25724c16f3c58f6b4af1508806804feda3269370bd50a43eff97e8e580f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11153 Malicious code in rudije (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcdd046bf1e56d4d7e470f97bf73aba4e564024ec6a89b1493ffc7d5c5a7101c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in evermade-bare-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0b99357d9a7ebb58236fd8dbbe61d922cbc65f219d0bf1c7ce4ab17778ed198 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

liboqs -- Correctness error in HQC decapsulation

The Open Quantum Safe project reports: A correctness error has been identified in the reference implementation of the HQC key encapsulation mechanism. Due to an indexing error, part of the secret key is incorrectly treated as non-secret data. This results in an incorrect shared secret value being...

Malicious code in sol_web3_helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1bc63c11f5b8fec0c212369623282a5e4185ff1541e90e8cbefc9f41bfb4b9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11118 Malicious code in etherscancontractinteraction (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9aa1dfa3873a9053735f5f55e19e500a9479df8c99b3b204aa81320b6aa2e34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in windowscleaner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94547921ad3e8e58882066754306ec38e9d39dde617fb844c8d92f529040757c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sync-ghes-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6392f0dcc6aab8ef4f6f380e3278d8b439e146ff540bd1c9e5b445a71ee577cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gaming_token (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50f300010193f83d2adba7d5cf4a6e9ebf54f0e40c67e1ac0fc99f5255bdfa53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11054 Malicious code in nft-dapp-starter-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b97b6a233f40dca2413760c7d1f9a8cafb4a0ed8099ab831ebbe6e8a0fba6ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rlending-protocol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27ea1d4432cf5608fe93dfeee0233db7b542ad396d5b46ed26508b73bc99876a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-formatter-richhtml (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c1882bf6a70efa173960185fd119365caef76186573c332b079148bd0e752f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...