MAL-2022-2005 Malicious code in colors-1.0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21f2380bbd6e6d7e99f593d63b5d305336124b1015e1d8202be080bce3510e95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6358 Malicious code in supplysec-alert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc158c832cba14e06b11eb1e13201b00d0ab3d75315c29cb89db5be2494e64c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-443 Malicious code in @munters/calculations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc48e14a8340b8fe4d4f38042d8fc3c982327833cb977f4bd1f847a84a6c9b81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in slack-notifier-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 808c04da5449cf52c62a74f07d423906be15af0d636700e95bae64f37cc069c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6159 Malicious code in slack-notifier-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 808c04da5449cf52c62a74f07d423906be15af0d636700e95bae64f37cc069c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1170 Malicious code in audit-logging (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76f664ae26ee0d9606ef9d7901b65dc80da1f73baee088eeda8ab6025dabf096 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-795 Malicious code in @zivver/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 252563d49ca0b12c7e64af6a853395f0e071b90cb7e08479fccac1ff8ad07983 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-723 Malicious code in @wellsfargo/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30795b36b61b679ad14d6f8b6cc1b5c55791a0aa9b382dd0dce89acd19ed2bfd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-636 Malicious code in @thealgorithms/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbdc2f9f7a432e2a6636a12351570f1e0b487173fc74e7e84fdb902622839e3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-635 Malicious code in @texashealth/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b70d7ed0d1d6f669632477dbdd002d99b4713dd4c71fecad9fc68b039fbe680 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-568 Malicious code in @rwbaird/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30e7aff7ce93600683768dcfdb71608ffac864169882a014ba64687ed5dfb4cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-371 Malicious code in @jnjmobile/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 026303453886cf72444317326c7ff234f8485ca7f4e1843afdc95936c7859798 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-210 Malicious code in @dropcontact/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5c373e0739e7760a1b826371b15f768ea8cd40dcd6bb27579d441ea9e73fdcf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-172 Malicious code in @clenergy/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5fa317f8ea6419afe29be950362f8a62cf758dd57283b21730803d9da616719 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-1905

The Events Made Easy WordPress plugin before 2.2.81 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

CVE-2022-1905

The Events Made Easy WordPress plugin before 2.2.81 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

Sql injection

The Events Made Easy WordPress plugin before 2.2.81 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

CVE-2022-1905

The CVE-2022-1905 entry documents an SQL injection in the WordPress plugin “Events Made Easy” before version 2.2.81. The vulnerability arises from improper sanitisation and escaping of a parameter used in a SQL statement via an unauthenticated AJAX action, allowing an attacker to inject SQL. The ...

MAL-2022-3591 Malicious code in helix-contentsource-connector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab6bfb146db6490aea3415da94f36a8e0e45b5870003b32633008db18332b36d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in action-create-release-pr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1f9c096fa3bf9d38477488398a8d49d517f96c85896b4312ef8e8771336c43a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...