639 matches found
MAL-2022-6975 Malicious code in vscode-dependency-confusion (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0594ce1325ddf78cf55fd02ddf63243a2645252bc5eb813b2f60faabf444f87a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in vscode-dependency-confusion (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0594ce1325ddf78cf55fd02ddf63243a2645252bc5eb813b2f60faabf444f87a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in vscode-dependency-confusion
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2022-3774 Malicious code in identity-vscode (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d7563819f33fd96fcc6cfdbb40434f9ba5fd41b63c990af654c1fd5ba100611 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in identity-vscode
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in vscode-bicep
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2022-6972 Malicious code in vscode-bicep (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 211da03238882a9c08d94528e34ba710469e3288e553316948c5a33a52bab9f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in vscode-bicep (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 211da03238882a9c08d94528e34ba710469e3288e553316948c5a33a52bab9f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5400 Malicious code in polaris-for-vscode (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6bc34f6d71b60060bf2cca416b9018d7f97fd0f233c710e9b92625642c4bce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in polaris-for-vscode
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in polaris-for-vscode (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6bc34f6d71b60060bf2cca416b9018d7f97fd0f233c710e9b92625642c4bce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-R84V-QFF8-JV5G Remote code execution in vscode-npm-script
Visual Studio Code npm-script Extension Remote Code Execution Vulnerability...
Server-Side Request Forgery and Uncontrolled Resource Consumption in LemMinX
A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...
GHSA-52VV-3VF7-F7WH Server-Side Request Forgery and Uncontrolled Resource Consumption in LemMinX
A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...
CVE-2022-0671
A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...
CVE-2022-0671
A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...
Server side request forgery (ssrf)
A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file...
CVE-2022-0671
The connected sources confirm a vulnerability in vscode-xml prior to version 0.19.0 where downloading a schema can trigger blind SSRF or DoS via a large file. Affected component is the vscode-xml schema download/processing path; root cause is improper handling of externally downloaded schema data...
