MAL-2022-7344 Malicious code in yeoman-33enerator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46467411b04dd7b9a5c0f9063b47e48dcb506330bdcd90899e4e20e48de784e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3698 Malicious code in http-proxy-iddlemare (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2f358bcd3dc9d017b753a0661664f92444c3b40db7af4e0a10fe7e9b0cb12d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1190 Malicious code in awodr-wrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b37b691358f802cf42a7236eecfa42f04d42c2c961d085fd8f7ee928f236db11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1077 Malicious code in apth-exists (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cddb4cfcf014f98dd8994e76c4ce298a83392232bb337efe3777ae8ce0b493b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4790 Malicious code in nde4watch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a78c9846901d8f1b57e9fee1d506d43b913482b18e56118b09de90281a6f97b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5010 Malicious code in oc8etio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c10ed62820cb8db8fa3b30766871e5ceb964a8065ec0c6f1f95a305a6f152574 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4483 Malicious code in markdowvnit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f5fcb8b92c01a2d46eb2ce0d518198542538922425915dffdb6b01d504206f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1423 Malicious code in babelplugindynamiciomportnode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc136c8414b557bcd610faed3b848fc1d8bd2c48f97d1dda2fbc79573d81b11a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1965 Malicious code in codashop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccc6c66181152007bc17d58537f2fffb29c29a2367e6f92f30d2844189706f32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Design/Logic Flaw

In versions 2.x before 2.3.0 and all versions of 1.x, An attacker authorized to create or update ingress objects can obtain the secrets available to the NGINX Ingress Controller. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

MAL-2022-4931 Malicious code in nozbedesktop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bb2ef3a5bcbaedc4dc6703278ab995ca4fd30eba64c5dc9b6f7498fc1751403 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-977 Malicious code in amplify-category-api-e2e-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12a35d0a8b1a0a8aec5fef2c0e459f6151837f40572441aa6110a0d5686cb858 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3641 Malicious code in hjtdfypiocxwelkb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0366e6dd7fc58f8c203a477880bb18cbe073238035b5b662d17b518a7da8ec82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1485 Malicious code in bcztpuiojndlhmvx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b561e6c70dc5155abc61d9b26a2a49a210a7bf5a0d229078a181dfa46a22a56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7151 Malicious code in winhfkqtrbudljey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 509ccd07dbb9118c419ed386aa839be709a32ba17c4863708ece10daf4562035 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-22346 · Jenkins · Jenkins Recipe Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Recipe Plugin versions 1.2 and earlier Description: The issue is related to missing permission checks in the Jenkins Recipe Plugin, allowing attackers with Overall/Read permission to send an HTTP request to an attacker-specified URL a...

PT-2022-22363 · Jenkins · Jenkins Xpath Configuration Viewer Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins XPath Configuration Viewer Plugin versions 1.1.1 and earlier Description: A missing permission check in the Jenkins XPath Configuration Viewer Plugin allows attackers with Overall/Read permission to access the XPath Configuration View...

MAL-2022-4740 Malicious code in muzli-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d70906f92e9d13c4ed3f66e1d92ff8617be92998ead1687ce3a5354fe8441864 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6485 Malicious code in test-old-npm-sub-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ba226b2ebc7f5544f5dc2c0851a81c6921a1b3504cd845d348daeb0cb13b07c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-454 Malicious code in @nerv-hq/control-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20a7e7877cb0a7188b9fdc4feb0645afa1aa7cd1998ce9a61e3c170eb714cf35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...