MAL-2023-161 Malicious code in cas-core-renderer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26d20be8c341ff87fc8ce4d2871dea36d7e1f5d778de7bc62e991d54c73764b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-79 Malicious code in action-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f90778c15b41e8d153aaa97ddd19ece7aca4860fd7872ee3dfc6457f201f1433 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in create-or-update-comment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 529afddb0ce1c2ffee5a4ae20c89657596df9fb27440956e1f78e8f6b80cb67c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-26403

CVE-2021-26403 corresponds to an AMD SEV vulnerability: insufficient checks in SEV could allow a malicious hypervisor to disclose the launch secret, risking VM confidentiality. Documented impact: local attacker with low privileges could compromise confidentiality; exploit details are not provided...

CVE-2021-26403

Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in compromise of VM confidentiality...

Malicious code in web-pairing-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c481dd9884beb49a2671ec3cd7a6505290cd0d7b610036d41c2244aa0814315d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-249 Malicious code in dextools.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d58b956d093d028540f8fc9d9c35c21bfa0c7c42adaeb771c01b3d3478db32b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dep_pre_install_v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9804ef6cb7b86a741d99ebe417df5a6e18e0a73658daf4932f2d8bcf4052f07d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-318 Malicious code in evolve-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f91172e8ea3922e0774dbdd5e55592c05035e0ea441f8064c3e163dd81dcd85e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hsbc-pb-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68ebe89705d558966c9f1db1e54b394a9e60bfe6e26d00f31d9d5869849954ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fi-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc495fa631684eaf2b2e11d0085de9a7332542b9bac2dfd45f640105def65103 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-1484 · Amd · Amd Secure Encrypted Virtualization

Name of the Vulnerable Software and Affected Versions: AMD Secure Encrypted Virtualization SEV affected versions not specified Description: The issue is related to insufficient input validation in the implementation of AMD Secure Encrypted Virtualization SEV microcode in AMD processors. This coul...

AMD Server Vulnerabilities – January 2023

Bulletin ID: AMD-SB-1032 Potential Impact: Varies by CVE, see descriptions below Severity: Varies by CVE, see descriptions below Summary During security reviews in collaboration with Google, Microsoft, and Oracle, potential vulnerabilities in the AMD Secure Processor ASP, AMD System Management Un...

CircleCI Urges Customers to Rotate Secrets Following Security Incident

DevOps platform CircleCI on Wednesday urged its customers to rotate all their secrets following an unspecified security incident. The company said an investigation is currently ongoing, but emphasized that "there are no unauthorized actors active in our systems." Additional details are expected t...

GO-2022-1201 Timing attack in github.com/openshift/osin

Client secret checks are vulnerable to timing attacks, which could permit an attacker to determine client secrets...

Spinnaker 日志信息泄露漏洞

Spinnaker is a continuous delivery platform. It is used to release software changes with high speed and confidence. A log information disclosure vulnerability exists in Spinnaker versions prior to 1.29.2, prior to 1.28.4, and prior to 1.27.3, which stems from not preserving a masked secret...

Malicious code in sponsor-jobs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ff91cd8369dec7dda50c1d1b495256642f2f035c7789c5f99a6520094deabc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seaport-gossip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcea3993c918d92835f94dd8679cc99510db8b2eddbdd18ab217a46eb283ba86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prova-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 938fc5bb5c8e1be3541bd49183cc6bed9f7683b7d3d547f7273b89117e79d193 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1478 Malicious code in bcashjs-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43f17b42835fc6b1885e7f354fcfc94bbb64f66f97e8b1ed5cb2940a07b54051 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...