MAL-2024-7197 Malicious code in @zitterorg/eos-necessitatibus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26c240b95250061cd1a54fdc5f060035f7cd15f6853631d81852acf073966aa0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7193 Malicious code in @zitterorg/enim-earum-maiores (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d24ba16beda911387c48ddc326ff8f37147f5d45ee7c7fde7e2c78abc7286c71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7182 Malicious code in @zitterorg/dolorum-aut (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfd1fe0250e37ac6db80fed373ad9c4e2d66220661c939422eed53ad0638d402 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/nihil-illo-minima (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b26a5dece26c1c38583734abb9db1b67ad7170b3bc7a700e7105e5b17deb49ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/enim-aperiam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d0d2707b9fcc414a5b76c25230ca1e98870fae08f40da58f2f4edec6c10334b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7305 Malicious code in @zitterorg/numquam-assumenda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40dbf80466e6d61a5d3a5331f58a83a7b50dfd54cce4a29d3a1bb254b9814df1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7409 Malicious code in @zitterorg/voluptate-aliquam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2d6d2150694a90ba597cf02d3bdb834a44388c3cff43d4aaeabbb893a45626a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/nobis-possimus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75d1fcd96b36ece0c911e6d8f3f20803aab5a22cba8038f0b2c1142ec3092ed4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/quia-quasi-voluptas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4692a97c40fb9dc47048b7597ef41fcf69d7df947c24e37c28ff7fcb91e107dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7221 Malicious code in @zitterorg/illo-accusantium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b14c41e9b36aedf4d98d0a7903eec6f7a4efde3d8aee85ee374126aff40b5104 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7322 Malicious code in @zitterorg/perferendis-aperiam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ada3ec39d38fc41130d50c883a8ca0c97c4de7875cf9b79f6a5ba20cccdc627 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7250 Malicious code in @zitterorg/iusto-ipsum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6840b085512a54ba0ea22e034dafd51527998fcf28c5932478f1746624946b94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/repudiandae-quidem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06241bc57f5320925f66ab1506bc038df088d5600d2540aba83a38d900a0be5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OpenStack Security Vulnerabilities

OpenStack is a cloud platform management program of the National Aeronautics and Space Administration NASA. A security vulnerability exists in OpenStack, which stems from an input validation flaw that could allow an attacker to deliver a malicious image by uploading or creating and modifying an...

Malicious code in bageth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ceb1afd39be45104caed0892ba1fa5631e23807d2aa84d0981af466570efd384 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GO-2024-2433 CubeFS leaks magic secret key when starting Blobstore access service in github.com/cubefs/cubefs

CubeFS leaks magic secret key when starting Blobstore access service in github.com/cubefs/cubefs. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...

Malicious code in lnx-integrity-check-prop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a2be1591ee055bb001b6d945290d1fd8e9d367bd1d7e1b96b0ab70031541cab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-39459

A vulnerability was found in the Jenkins Plain Credentials Plugin, which stores secret file credentials unencrypted only Base64 encoded on the Jenkins controller file system. Users with access to the Jenkins controller file system global credentials or with Item/Extended Read permission...

MAL-2024-1674 Malicious code in mwp-localtunnel-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae52f00fa4bd2a83dcf25546a586d0a84f2778364edfb5568f1ee899848dce7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Secret file credentials stored unencrypted in rare cases by Plain Credentials Plugin

When creating secret file credentials Plain Credentials Plugin 182.v468b97b9dcb8 and earlier attempts to decrypt the content of the file to check if it constitutes a valid encrypted secret. In rare cases the file content matches the expected format of an encrypted secret, and the file content wil...