Malicious code in discord.js-dmall-friends (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a47185392e18cdda84f90b5448bb982832bf1a987d8b7d27af56587e509912c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in child-proces (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c848180a34155de4ca426e1b0fb5f5d6438c46d1f8c55e8af1a6ddd2bd50078b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-selfbot-dmall-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1b58a6a42e742f72e54b199be19149a75eb709ef1a08876eeb5dfd28d36bab7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dicsord.js-selfbot-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84f2e79f633397e18f715847a68fa1228c413d8023e0e7e4e31a096484384ecb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-15712 · Unknown · C21 Live Encoder/Live Mosaic

Name of the Vulnerable Software and Affected Versions: C21 Live Encoder and Live Mosaic product version 5.3 Description: The issue allows a remote attacker to upload different file extensions without any restrictions, resulting in a full system compromise. This is due to an unrestricted upload of...

Malicious code in apiv2-fetcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6a736a3aae8da541778dbb3295cabdd0b7e3f0b1767bf0ee2b77d6b595741eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in djs14-fetcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fdaa8c33d47bd0c5243d8b2c3dca13120e5768ac43893c96f6640f0ce69b461 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Adobe Acrobat Reader 输入验证错误漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. An input validation error vulnerability exists in Adobe Acrobat Reader. An attacker could exploit this vulnerability to compromise an affected system...

Two Zero-Day Flaws Found in Ivanti Connect Secure and Policy Secure

Summary: The active exploitation of zero-day vulnerabilities CVE-2023-46805 and CVE-2024-21887 in Ivanti Connect Secure and Ivanti Policy Secure gateways presents a serious threat, allowing unauthorized remote code execution. The actor, recognized as the Chinese nation-state-level entity UTA0178,...

Malicious code in nylas-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2deede55e9c84cfc6a261b2de7de468c49dd03fe6cdee3eda009eeaa0cdb0a73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ember-cli-progress-ci (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54512754f5c019f13ce9e5c3554ccdc6180846834e3f02daa24abb228033fc95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deep-search-exports-directory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05115bc38d2b7d646eb62c3541059ec47a535e35fad54010bcc53578fe1c7099 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @monokera/react-components-storybook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdf75e7663fbdb265190a8a2b33f0e6feb6e3d3cea6da8c936226cbe4c95f95c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in d5-es6-sass-boilerplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3090df994b516cfc30ee58cc5871282f61ebc4e378a73744fb779705e16a1a35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kodiak2k (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d7f80fed974c7f0542149af0bbda82f3b4beee0e76dc130d7449daf82a30311 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ether-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c0daa6287f78623d9fd9d2bd501403142d5196ad67ff5eb49c867d9dea7504a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mw-common-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab85f947099773c7e6dd5b4c3abd115db9beee7e407c87916ef282f8992ac845 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in unit-testing-controllers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 206ebabfab4ea20b85ed6293c085ea8a6c0c0d85a70a1616a1963ac8556cf315 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @chainxxx/act-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 664f2c7fae7cf7210c9705398c8deb45d7468131ad49bed2b3ca8738f62edf96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sd-v13.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61d641e6795079f0b94c5254c8bd4fb6173a3e2b92512c79c76ed351c4868d8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...