CVE-2023-42456

Sudo-rs, a memory safe implementation of sudo and su, allows users to not have to enter authentication at every sudo attempt, but instead only requiring authentication every once in a while in every terminal or process group. Only once a configurable timeout has passed will the user have to...

The Rise of the Malicious App

Security teams are familiar with threats emanating from third-party applications that employees add to improve their productivity. These apps are inherently designed to deliver functionality to users by connecting to a "hub" app, such as Salesforce, Google Workspace, or Microsoft 365. Security...

Malicious code in @zettle-bo/pp-profile-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1620f673435e4da925d2327f2d50d0ab0b66532cdb1d19d87accae90da85ac3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b961ea11cf720196d00489b643e7085441ce41efe9d21ef3d77b4f24c1238ef3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/cash-register (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ede3f984e1ba545642d80ef08ce7649b6094423fff89e48416e59028359f2530 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/invoices (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 396cb6377e3adb994eacdae5dfc8df633bb4e320f9bff443b955c8d0e1bed43d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/bootstrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 348b20a3785062502338cff3dc24b6f6ed6d517924be7055ceb59e444232a7cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/staff-account (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6890c2d23d73e43eaf40b3d6435083b993f77894876b67b4a2ea41c9a223f3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dot-environment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c351e2b7cce60d59efcaf6f8cf5b03d221b55f5c48e2d6ea02bd18a1868cdb7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apka-papa-chand (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e0280086ec725c1ba35969b7c4c5ecbdfbad1fe3e561fb343d71c5bb99ebfd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @fixedwidthtable/fixedwidthtable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fb1ded01c24b9c7b6ce54eede679199fa8564a984ca86323c750500b1f50649 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fb-chat-api-temp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63c74c505c9865af18f53843e393fef47f02c267d0f5a0cc3f82efc5024039d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thinhdz2001-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc057d5c15cbb841971a77ec214defaaa36bdd16dccbba8fdd162bcc41e26b6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thinhdz-chat-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10feefde0eba2eeb545796cc1ab17d266bb82abca9168de36be88ac78676b52e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @abdullarahaman/fca-arya-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0d8bdc3f83aeb4fb00d8a78075559026cb93e20272f821c1d7735207d55ad8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in loudashe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware deba8f958ae41360f9d21ab5a0439264925f37d9bc3d0acda1f0583924c05b82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8128 Malicious code in eters.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3cd7902eaf2be03129a18569c61c4f2ca2e0e980a7f9d52da0cdde33c51bb07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in etheres.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f2233d7c65c25f473a3361254525a58f1182dfe5f8f3e9f0f4ac0dd68a43401 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in symbl_ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2a6d892c350f9034ac4cd7c1670b6b7a31f864e0ef2beeccfd53bb309336396 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in telia-common-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfebd0cdbe7eb17494bd4125767a79da7343f06e4fbe26c09d95f7b94e123f8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...