Malicious code in tailchat-service-swagger-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acf09d7e9f52a0406ff87b349906e6278f766537755abbd90395b2179ccd36fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

actix-session-surrealdb (>=0.1.0 <=0.1.5) potentially affected by unknown CVE via surrealdb (=1.0.0-beta.9)

surrealdb CARGO version =1.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on surrealdb and may be impacted: - actix-session-surrealdb =0.1.0, =0.1.5 Source cves: unknown CVE Source advisory: OSV:GHSA-H4F5-H82V-5W4R...

CVE-2024-11575

creationtimestamp| type| source ---|---|--- 2024-11-21 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1569/...

CVE-2024-37376

creationtimestamp| type| source ---|---|--- 2024-11-13 03:22:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113473495543964820 2024-11-13 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1502/ 2024-11-13 09:12:33+00:00| seen|...

CVE-2024-32844

creationtimestamp| type| source ---|---|--- 2024-11-13 02:52:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113473377472906912 2024-11-13 06:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1495/ 2024-11-13 09:12:33+00:00| seen|...

ansible (>=10.0.0a1 <=10.7.0), ansible-playbook-grapher (>=2.3.0 <=2.5.0) +24 more potentially affected by CVE-2024-9902 via ansible-core (>=2.17.14 <=2.17.4)

ansible-core PYPI version =2.17.14, =10.0.0a1, =2.3.0, =0.2.1, =2.1.1b1, =4.1.0, =0.1.0, =10.0.0, =0.1.0, =1.3.3, =17.0.0, =0.1.0a0, =19.0.0, =20.5.1, =21.2.7 and more Source cves: CVE-2024-9902 Source advisory: OSV:GHSA-32P4-GM2C-WMCH...

01os (=0.0.14), 21cmpsdenoiser (>=1.0.0 <=1.0.2) +25234 more potentially affected by CVE-2024-48063 via torch (>=1.0.0 <=2.4.1)

torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.16 - a1facts =0.2.6 and more Source cves: CVE-2024-48063 Source advisory: OSV:PYSEC-2024-259...

aberoth-ephemeris (>=1.0.0 <=1.0.2), adop (>=0.0.1 <=0.0.4) +267 more potentially affected by CVE-2024-49769 via waitress (>=0.8.10 <=3.0.0)

waitress PYPI version =0.8.10, =1.0.0, =0.0.1, =0.0.1, =0.0.4, =0.0.13, =1.1.0, =0.1.13, =1.0.2, =0.1.1, =0.0.1, =0.2.0, =0.1.1, =0.1.7 and more Source cves: CVE-2024-49769 Source advisory: OSV:PYSEC-2024-211...

b4ae (>=2.0.0 <=2.1.3), clatter (>=0.1.2-alpha <=2.0.0-rc.1) +26 more potentially affected by unknown CVE via pqcrypto-kyber (>=0.1.2 <=0.8.1)

pqcrypto-kyber CARGO version =0.1.2, =2.0.0, =0.1.2-alpha, =0.1.4, =0.1.1, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.5.0 - qux-pqc =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0381...

CVE-2024-50044

creationtimestamp| type| source ---|---|--- 2024-10-21 22:43:17+00:00| seen| https://t.me/cvedetector/8563 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...

CVE-2024-9754

creationtimestamp| type| source ---|---|--- 2024-10-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1355/...

academic-chatgpt (>=0.3.0 <=0.4.1), africanwhisper (>=0.2.1 <=0.9.0) +316 more potentially affected by CVE-2024-47165 via gradio (>=1.7.7 <=4.8.0)

gradio PYPI version =1.7.7, =0.3.0, =0.2.1, =0.1.5, =0.0.6, =0.0.2, =0.1.0, =0.8.11, =0.4.0, =0.0.4, =0.7.0.dev134, =0.7.0.dev143 - anymodality =0.1.0 - apillava =0.1.0 and more Source cves: CVE-2024-47165 Source advisory: OSV:GHSA-89V2-PQFV-C5R9...

@gambalabs/sentry-nuxt (>=8.31.1 <=8.32.0), @globalbrain/sefirot (=3.40.0) +26 more potentially affected by unknown CVE via @sentry/browser (>=8.0.0-alpha.2 <=8.32.0)

@sentry/browser NPM version =8.0.0-alpha.2, =8.31.1, =8.9.0, =1.0.386-leo-ron-885-experimental.35, =0.0.1, =0.1.0, =8.0.0, =8.0.0-alpha.2, =8.0.0, =1.0.0, =5.0.0, =8.0.0, =8.0.0, =8.0.0, =8.32.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-593M-55HH-J8GV...

@albumjs/album (>=0.1.0 <=0.2.1), @albumjs/cli (>=0.1.0 <=0.2.3) +220 more potentially affected by unknown CVE via @rspack/core (>=0.0.0-a37ce9d-20230210040019 <=1.0.0-rc.0)

@rspack/core NPM version =0.0.0-a37ce9d-20230210040019, =0.1.0, =0.1.0, =0.1.0, =9.3.0, =1.1.1, =1.1.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-84JW-G43V-8GJM...

a-texam (=1.1.0), aait (>=1.0.4 <=1.0.5) +1255 more potentially affected by CVE-2023-4863 via opencv-contrib-python (>=3.4.11.45 <=4.8.0.76)

opencv-contrib-python PYPI version =3.4.11.45, =1.0.4, =0.0.29, =1.11.4, =0.5.0, =0.1.0, =24.3.2, =1.0.0, =0.3.0, =0.1.0, =0.1.0, =1.0.0, =1.0.3 and more Source cves: CVE-2023-4863 Source advisory: OSV:GHSA-CXJF-X6JP-P7MC...

5sg (>=0.0.2 <=0.0.8), @1stg/app-config (>=4.0.0 <=7.3.0) +2067 more potentially affected by CVE-2024-45047 via svelte (>=0.0.1 <=4.2.18)

svelte NPM version =0.0.1, =0.0.2, =4.0.0, =4.0.0, =6.0.0, =2.2.0, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =10.9.0, =0.0.1, =0.1.0, =1.0.0, =1.0.0, =2.0.0 - @albertaz/r2s-cli =1.0.1-alpha.0 and more Source cves: CVE-2024-45047 Source advisory: OSV:GHSA-8266-84WP-WV5C...

aalto-gpu (=0.1.0), aplusml (>=0.1.0 <=0.3.1) +172 more potentially affected by CVE-2024-43805 via jupyterlab (>=0.31.1 <=3.6.7)

jupyterlab PYPI version =0.31.1, =0.1.0, =0.3.0, =0.8.2, =0.1.0, =1.3.5, =0.1.0, =1.1.3, =0.1.0rc1, =0.1.0, =0.2.0, =1.0.1, =1.0.3 and more Source cves: CVE-2024-43805 Source advisory: OSV:GHSA-9Q39-RMJ3-P4R2...

llm-toys (=0.1.1), tcbench (>=0.0.20 <=0.0.22) +1 more potentially affected by CVE-2024-6578 via aim (>=3.17.4 <=3.19.3)

aim PYPI version =3.17.4, =0.0.20, =0.1.0, =0.5.6 Source cves: CVE-2024-6578 Source advisory: OSV:GHSA-P9F2-JG9W-CX69...

CVE-2024-40990

creationtimestamp| type| source ---|---|--- 2024-07-12 16:05:54+00:00| seen| https://t.me/cvedetector/739 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07 2025-12-03 14:14:49+00:00| seen|...

11x-wagtail-blog (>=0.0.0 <=0.2.0), aldryn-django (>=5.0.2.0 <=5.0.11.0) +234 more potentially affected by CVE-2024-39614 via django (>=5.0.0 <=5.0.6)

django PYPI version =5.0.0, =0.0.0, =5.0.2.0, =0.0.15, =1.14.3, =0.0.20, =0.0.13, =0.0.19, =0.0.34, =0.0.50, =0.0.5, =0.0.11, =1.0.3, =0.1.0, =0.2.5 and more Source cves: CVE-2024-39614 Source advisory: OSV:GHSA-F6F8-9MX6-9MX2...