MAL-2024-8587 Malicious code in @diotoborg/ratione-animi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99fbce442b156c6ca8741c6adc28f303a48f96a03c4ed901e5665e96c520f9d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7366 Malicious code in @zitterorg/rem-optio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12251ace5b8c1069cc484f512bbd1e31fe2cc3cfb90fa2bfd47b5d2687d2274b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7093 Malicious code in auth0-authz-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ddc031877d6efc19470df3d757e067cb9fd38974fd69be4140e854f2ca69840 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-933 Malicious code in iifl_express_middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bd6065d5aeb8d845fa2198e1ffedbb927895fbac183920ec87d85e89c79c03b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-843 Malicious code in wlwz-2312-7407 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5598f2500474143c1b6765ca2f10626af481f2562493214cc9504a92b497a5f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-648 Malicious code in wlwz-2312-5301 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86163aecf0ef7f4d9e376d7d04d9874fe1b30306d89b5a85b05c75740fb24a7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-366 Malicious code in wlwz-2312-2107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4e0473238cfdc7e52ebe6ae11e6dc9575d8ca45278ee0fcea1fd6d19420a783 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-39337

A security vulnerability in EPMM Versions 11.10, 11.9 and 11.8 older allows a threat actor with knowledge of an enrolled device identifier to access and extract sensitive information, including device and environment configuration details, as well as secrets. This vulnerability poses a serious...

CVE-2023-4154

A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active Directory to privileged users and Read-Only Domain Controllers RODCs. This flaw allows RODCs and users possessing the GETCHANGES right to access all attributes, including sensitive...

MAL-2023-8143 Malicious code in loudashe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware deba8f958ae41360f9d21ab5a0439264925f37d9bc3d0acda1f0583924c05b82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-30853 Gradle Build Action data written to GitHub Actions Cache may expose secrets

Gradle Build Action allows users to execute a Gradle Build in their GitHub Actions workflow. A vulnerability impacts GitHub workflows using the Gradle Build Action prior to version 2.4.2 that have executed the Gradle Build Tool with the configuration cache enabled, potentially exposing secrets...

MAL-2023-492 Malicious code in hardhat-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9ecd6650e933188001d304f60e4bdc5a7820065595396fe796ba8d86eb3bda7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2009-4303

Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores 1 password hashes and 2 unspecified "secrets" in backup files, which might allow attackers to obtain sensitive information...

MAL-2023-230 Malicious code in dca-http-searcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fa09b188b8888ce9d5f3a95948d3823bba2d541295c1b21b49ee876d50d0058 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-83 Malicious code in agent-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dd87cf4d9e1e62b56ac8a65012bd4d49c2653e205f6eea7ef15b67deb469100 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4076 Malicious code in jsouile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43eb5662da53a65cb4503ac7500bea7f425f99c84289da3c4b54e7273811af80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2533 Malicious code in disney.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa6ac0ffa4aaec2dcefa2b90b7b2351de64a63eab582d3aba0e437fd5ef8dd7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6667 Malicious code in tslint-playground (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b487c30209288915a78a54104205552e07c0667d4111beb89f0b27dcbb3e90af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-930 Malicious code in alfaform-core-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b774927a44e0387b65b7440c9ed8179b099a96cc5dc65b2cd515347298ca7fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3592 Malicious code in helix-rum-collector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 002b86a6a7d367dc196dbac6c12dff9827ed2b0a483cb8520063a9f3e90c513b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...