Malicious code in auth0-lock-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fc8cb7c85f580c66397adec583bbd6623eafcb98683fcf6299ca73188892009f The OpenSSF Package Analysis project identified 'auth0-lock-webpack' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

MAL-2024-11408 Malicious code in nodes-polyfill-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in nodes-polyfill-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in node-polyfill-webpack-plugins (npm)

--- -= Per source details. Do not edit below this line.=-...

Malware in theme-webpack

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in webpack-insert-sentry-plugin

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in webpack-svg-spirit-import

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in webpack-support-multi-domain-plugin

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

webpack: DOM Clobbering vulnerability in AutoPublicPathRuntimeModule

A DOM Clobbering vulnerability was found in Webpack via AutoPublicPathRuntimeModule. DOM Clobbering is a type of code-reuse attack where the attacker first embeds a piece of non-script through seemingly benign HTML markups in the webpage, for example, through a post or comment, and leverages the...

Malicious code in webpack-svg-spirit-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e06e486295eccd406df5d378ae3d70ad72e5be5dad6bd5d99fde1d16e324f5af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10890 Malicious code in webpack-svg-spirit-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e06e486295eccd406df5d378ae3d70ad72e5be5dad6bd5d99fde1d16e324f5af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10889 Malicious code in webpack-support-multi-domain-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df28dfaede54bce66eb7320e580118358e8db8869c014298d0a7abb4a0e43497 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10888 Malicious code in webpack-insert-sentry-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e09bc9d55945389c2e5f8e61bc733735e8f50b50b8ebd61b6801f9d31278d74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webpack-insert-sentry-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e09bc9d55945389c2e5f8e61bc733735e8f50b50b8ebd61b6801f9d31278d74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10745 Malicious code in theme-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9b3a3a3525340a731ace89ce62986f6d4d0a7e2a5d867f658f5864b30654d51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in theme-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9b3a3a3525340a731ace89ce62986f6d4d0a7e2a5d867f658f5864b30654d51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: IBM Event Processing susceptible improper validation

Summary IBM Event Processing vulnerable to cross-site scripting, caused by improper validation CVE-2024-43788 Vulnerability Details CVEID:CVE-2024-43788 DESCRIPTION: Webpack and Rspack are vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote...

Security update for pgadmin4

This update for pgadmin4 fixes the following issues: CVE-2024-38355: Fixed socket.io: unhandled 'error' event bsc1226967 CVE-2024-38998: Fixed requirejs: prototype pollution via function config bsc1227248 CVE-2024-38999: Fixed requirejs: prototype pollution via function s.contexts..configure...

Malware in webpack-i18n-tools

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-9415 Malicious code in webpack-i18n-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a576cb50caca4263e84393e5d4b07ecdedd011730a4199662859a890413fac62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...