MAL-2022-833 Malicious code in action-publish-gh-pages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a74ffd02c6f641086cd42add073f54fb155173390cde20c495999e563ff0471 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5259 Malicious code in pcln-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc15fdcdfbb7232669d37c50f75497d0db777080aea0549a26acf19a7a520a90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6166 Malicious code in slint-config-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71844446cca16e4b3f681a871d4c858e2a3222aa3c2dc8a0eb5fd6f97c1aaf1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5747 Malicious code in remote-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fcb162e726d16a6a879f1638e37d2ff333ad217f5c75decb034d9b8330a9167 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6710 Malicious code in twofactor_totp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db2224050434153fb8bc046b6386f91fbdba1537beff176e755987de07104949 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5485 Malicious code in proof-generation-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 720a1d714457c3158b503cd852160e95601dab1be74fdd9c12f1e6388d02a2d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2762 Malicious code in epam-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fde824f3d16819175b7781da6c196f7ad067667235e2c8663a656a8debecb58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7246 Malicious code in wwi-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9312b4627bd6045a48f5442cc31fcedc0dd397fb36c1fc7aaf34f839bfcedac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2570 Malicious code in doom-workers-site (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea187c65ee7f8768c6ebe755e79017a5c014e3892dd3c10a6d81a698f285580e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5190 Malicious code in pages-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfe3d4394aecb07bd6acf8c1e4b1bad280125dda893323a1029ce6a468600546 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2343 Malicious code in datadog-agent-github-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9002ec7ae8e71f521014b440d4e81aea944c0c36aca8f9cd4c01bd5e609626cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in datadog-synthetics-github-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdb7d5c2b8247d500672b7c1089217058c98f072aa33d33e0f42bb0711fab357 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6814 Malicious code in upload-dsyms-github-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 643101696c68ab35b338173627e1f0f644c2dd2f6f601b11a9ab324d5549a1da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2353 Malicious code in datadog-synthetics-github-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdb7d5c2b8247d500672b7c1089217058c98f072aa33d33e0f42bb0711fab357 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3925 Malicious code in io.intercom.cordova.sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95d3158818ec3050c42c802391d0519c3f8d1e0120cd4908bcfb6690f3cccf54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-855 Malicious code in adelphi-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62529517e322d0077ccd0abb579f55691b51a840e24dbe989a19476798abadeb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in upload-dsyms-github-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 643101696c68ab35b338173627e1f0f644c2dd2f6f601b11a9ab324d5549a1da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

openSUSE: Security Advisory for rubygem-actionpack-5_1, (SUSE-SU-2022:2108-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLES15 Security Update : rubygem-actionpack-5_1, rubygem-activesupport-5_1 (SUSE-SU-2022:2108-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2108-1 advisory. - The actionpack ruby gem before 6.1.3.2, 6.0.3.7, 5.2.4.6, 5.2.6 suffers from a possible denial of service vulnerability in the...

SUSE-SU-2022:2108-1 Security update for rubygem-actionpack-5_1, rubygem-activesupport-5_1

This update for rubygem-actionpack-51 and rubygem-activesupport-51 fixes the following issues: - CVE-2021-22904: Fixed possible DoS Vulnerability in Action Controller Token Authentication bsc1185780 - CVE-2022-23633: Fixed possible exposure of information vulnerability in Action Pack bsc1196182...