Malicious code in cutoffurmind-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ef61a01ca0e61991b1fdbf89d955ed7c02e9482fb0d6f980fbaeffbf4e809b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2289 Malicious code in cutoffurmind-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ef61a01ca0e61991b1fdbf89d955ed7c02e9482fb0d6f980fbaeffbf4e809b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-836 Malicious code in activecore-react-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d5ff9ff17056c993a7172ac1407d2cde49eb00d1dc3ab6d29dc0240fcc396ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-619 Malicious code in @t15-ui-kit/enums (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 685b27cb36fa8e419b3fa2de15e0a9513372b1a662cc2f443a92caa0ae1eb500 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tochka-modules/t15-ui-kit-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 086e63c619a5b6887d4c00c37636d7366887829646ac38d2125202b4f5269d88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @cybernated/core-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 583d74dfe9c810d3ddd6e71a070b7a29cea19002f5505e8cf0406110d7fc67cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gd-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 006efe3422350c297cf4e99ba62f060d3768219a2edfd93ba2de5a313e7f6325 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-828 Malicious code in acronis-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 431e7c9d70568e5dfdc18aeb99d4ffddb22487462dea0588b1b5d29feebf36c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

1-click-bom (>=1.3.0 <=1.3.1), 25uikit (>=1.2.7 <=1.2.10) +2742 more potentially affected by CVE-2021-32014 via xlsx (>=0.10.3 <=0.16.9)

xlsx NPM version =0.10.3, =1.3.0, =1.2.7, =1.0.6, =0.0.1, =0.0.1, =0.0.3, =0.10.22, =0.0.2, =1.9.2, =1.0.1, =1.0.0, =1.0.1 - @aarongray.org/xlsx-workbook =0.0.1 - @abcum/ember-sheetjs =0.1.0 and more Source cves: CVE-2021-32014 Source advisory: SNYK:JS-XLSX-1311139...

@dmrvos/infrajs (>=0.0.4 <=0.0.8), @marjose/jstoolkit (>=0.0.2 <=1.0.0-beta) +10 more potentially affected by CVE-2021-21252 via jquery-validation (>=1.14.0 <=1.19.1)

jquery-validation NPM version =1.14.0, =0.0.4, =0.0.2, =0.2.2, =3.0.0, =0.11.28, =0.0.8, =1.4.0, =1.0.0, =3.0.0-prerelease.20170216T120000Z, =1.0.0, =1.0.6 - webpack-symfony-builder =1.0.0 Source cves: CVE-2021-21252 Source advisory: OSV:GHSA-JXWX-85VP-GVWM...

Command execution vulnerability exists in MyuCMS (CNVD-2020-67559)

MyuCMS front-end is built with UIkit framework, back-end is built with layui back-end framework and back-end is developed with PHP+MYSQL. A command execution vulnerability exists in MyuCMS, which can be exploited to gain server privileges...