MAL-2022-7318 Malicious code in yandex-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d1ee313e84908d1640d0bf6a657a0ad63ab41ab4274627d4741b57eaeef97a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yandex-langdetect-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb37e0b9d4dc2ea2b566458333358750d0dc1dbf000ffeb64e4ea677811220db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yandex-mycookie (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccf058581013d14a2250aec863d4390f17a695335998478ad3c4e2627b6df7dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7323 Malicious code in yandex-mycookie (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccf058581013d14a2250aec863d4390f17a695335998478ad3c4e2627b6df7dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2829 Malicious code in eslint-plugin-yandex-maps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14666129d0fc309e24efbcdc0bd4595a45bbf3b02d9a031a0a29413961fb2cac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-yandex-maps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14666129d0fc309e24efbcdc0bd4595a45bbf3b02d9a031a0a29413961fb2cac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7321 Malicious code in yandex-langdetect-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb37e0b9d4dc2ea2b566458333358750d0dc1dbf000ffeb64e4ea677811220db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5681 Malicious code in react-yandex-favicon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67fbffe869a619ee770b50818e5f42a7e85a7f9e673bb0310f4dc6c0a7d550e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7319 Malicious code in yandex-dumbledore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 201eddc02f1a9a0968cf753accb13659e88cd67e3b42819b114ecfcc9759bf5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-yandex-favicon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67fbffe869a619ee770b50818e5f42a7e85a7f9e673bb0310f4dc6c0a7d550e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yandex-dumbledore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 201eddc02f1a9a0968cf753accb13659e88cd67e3b42819b114ecfcc9759bf5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @eda.yandex/web-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c5a6f22fa46a2434e58223fb9802f0f65d739408da3658b572c9746a8f8f07c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in serverless-yandex-cloud-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9019450469d9db05f44f299499f74a7d8cd0de548a00c7395f6207e504f36f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6025 Malicious code in serverless-yandex-cloud-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9019450469d9db05f44f299499f74a7d8cd0de548a00c7395f6207e504f36f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-789 Malicious code in @yandex-data-ui/i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 642cf027577e6bed8f5cbba3545a5413cde94800ddc73cc95a5f8ce6ccb8a785 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7320 Malicious code in yandex-font (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 976f90479fd94cdd954476418038130dab2d6e12253f95817a88fbe33f3432e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yandex-font (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 976f90479fd94cdd954476418038130dab2d6e12253f95817a88fbe33f3432e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7322 Malicious code in yandex-money-currency-info (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1646902a2c5056651aa75b1e9dba62a1b6914ad5a1218786728bc09d32d19d61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-28226

Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.801 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating temporary files in directory with insecure permissions during Yandex Browser update process...

CVE-2022-28225

Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.684 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating symlinks to installation file during Yandex Browser update process...