Malicious code in citrixdeveloper-vscode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b05372f8df2c997750bf0c15b685b4ab01bdc3275b2e929a831dc20a90cff0c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6979 Malicious code in vscode-zk-autocomplete (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef6c5ab582b886133c756b804fd654aed0d7d98e7ef453af9235dfcf1f21e623 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vscode-zk-autocomplete (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef6c5ab582b886133c756b804fd654aed0d7d98e7ef453af9235dfcf1f21e623 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6978 Malicious code in vscode-stripe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1d0c32db564ed63889f6b2cbab203b6f3cf1d7b3a76bdc5c32e8637ba4e8a62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vscode-stripe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1d0c32db564ed63889f6b2cbab203b6f3cf1d7b3a76bdc5c32e8637ba4e8a62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2065 Malicious code in com.unity.ide.vscode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 416753a6cbd610d25709fb4492bbc5bd5b1b083e6aa740bd60884c08f94e39c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vscode-shadowenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf370493190485f5689b02ce2095ad5dd5fbe11fe1a2dc301434173ee6fabf68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6977 Malicious code in vscode-shadowenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf370493190485f5689b02ce2095ad5dd5fbe11fe1a2dc301434173ee6fabf68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in teamcity-vscode-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 781a5dd1bb7862e67510806bbe291457f580ad23f355ce15952e1831cd9753ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6441 Malicious code in teamcity-vscode-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 781a5dd1bb7862e67510806bbe291457f580ad23f355ce15952e1831cd9753ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vscode-dependency-confusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0594ce1325ddf78cf55fd02ddf63243a2645252bc5eb813b2f60faabf444f87a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6975 Malicious code in vscode-dependency-confusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0594ce1325ddf78cf55fd02ddf63243a2645252bc5eb813b2f60faabf444f87a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3774 Malicious code in identity-vscode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d7563819f33fd96fcc6cfdbb40434f9ba5fd41b63c990af654c1fd5ba100611 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vscode-bicep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 211da03238882a9c08d94528e34ba710469e3288e553316948c5a33a52bab9f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6972 Malicious code in vscode-bicep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 211da03238882a9c08d94528e34ba710469e3288e553316948c5a33a52bab9f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5400 Malicious code in polaris-for-vscode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6bc34f6d71b60060bf2cca416b9018d7f97fd0f233c710e9b92625642c4bce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in polaris-for-vscode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6bc34f6d71b60060bf2cca416b9018d7f97fd0f233c710e9b92625642c4bce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-R84V-QFF8-JV5G Remote code execution in vscode-npm-script

Visual Studio Code npm-script Extension Remote Code Execution Vulnerability...

GHSA-52VV-3VF7-F7WH Server-Side Request Forgery and Uncontrolled Resource Consumption in LemMinX

A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...

Server-Side Request Forgery and Uncontrolled Resource Consumption in LemMinX

A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...