MAL-2024-11964 Malicious code in dep-confusion-tester (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a02b1736028edc558aec7dae01fc23a8b183b0eb84ec65f6d97cad92f85d2083 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nerd4node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9212e7685c7fd13159cdd6b31f5c0b398be7266d6fcbab454def7f7d8fa1a781 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12008 Malicious code in nerd4node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9212e7685c7fd13159cdd6b31f5c0b398be7266d6fcbab454def7f7d8fa1a781 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12049 Malicious code in uflexreward (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c21575a90acc8da331ae3405950ef6ddf8c967865884904c66e3735a38c3bbfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11958 Malicious code in confidential-package-nam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1ca97a7c95d3a7f0bc8302fdfa94f96077f03fa620c53c49791fa260617d310 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uflexreward (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c21575a90acc8da331ae3405950ef6ddf8c967865884904c66e3735a38c3bbfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in confidential-package-nam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1ca97a7c95d3a7f0bc8302fdfa94f96077f03fa620c53c49791fa260617d310 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12051 Malicious code in uflexreward-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab6f3991bf23d78bbb66f584b408dc443c00d8dab5a6221ab255911e5c17d058 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12036 Malicious code in secret-scanning-custom-notifications (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 327294aa7aee3dce9cc1b90296b239e83b00f5589a3613f7261f268283a575aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in component-detection-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 612def523e2e2b3cd483831188b3e68f79f2575bc19954cc24088532608f7798 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11955 Malicious code in client-mpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 104583f4b439c932e7387c37cb7abdc91c85df2d7b7825c23a2e354f348e1932 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tools_platform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cce108b444c9a36ad6acda9ea27bf9a2c4ebefee5acf9bec84477f93a1329b04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11951 Malicious code in client-analysis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b972deca5352be5ff4ad1c1ca8d1b1da5c8f7f124ff1202510ecc3136ab617b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cdp-agentkit-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8d524f8c7995e353b380cc2c659b12067d589d4b56003ac355d9cc0736f8cd6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12058 Malicious code in upload-artifact (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9241c352df8001e364da964a6123f4cefa259415eefa70930aef98fe673a3202 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11960 Malicious code in container-toolkit-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 495f1eeee43fdcdf2a5b5468befc8209a0d5d55f315464d80a9ae3d926a34da7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in abacus-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bb03bbb0a4e31bfc1d2ca22ccbfc5090ab234c3359195c560188f54d9148113 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pzh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 004f5cb74f23f56bc002de95c9577243f64b2b9e66486ed8054b890039377d87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11938 Malicious code in abacus-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bb03bbb0a4e31bfc1d2ca22ccbfc5090ab234c3359195c560188f54d9148113 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Important: flatpak

Issue Overview: A sandbox escape vulnerability was found in Flatpak due to a symlink-following issue when mounting persistent directories. This flaw allows a local user or attacker to craft a symbolic link that can bypass the intended restrictions, enabling access to and modification of files...