MAL-2024-10663 Malicious code in eslint-plugin-ssc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cd44b1dc2a7c0a52132eee12cd12dfc07abdf093ae71052bfac7ea29771b985 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-shopee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a491d7ca4f79d0761b84a5784731279e82a28cf0aa3be6840e20b003a2543ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10662 Malicious code in eslint-plugin-shopee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a491d7ca4f79d0761b84a5784731279e82a28cf0aa3be6840e20b003a2543ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10661 Malicious code in eslint-plugin-module-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afc57b3b316c94a93252629b2c608c1e0dfd28fa51024ff8e2957db8efb8d48b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10660 Malicious code in eslint-plugin-mark-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3454a8e6853853d2148cad33c350ce65ee8d66082f3b5f9f85c6fa8d2936d6fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10658 Malicious code in eslint-plugin-foody-custom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 413bc171b326027e7cbf99cdc011916c6ae72ea6deb375617558510c4e80fbb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-49511

creationtimestamp| type| source ---|---|--- 2024-11-12 23:05:53+00:00| seen| https://t.me/cvedetector/10739...

MAL-2024-10603 Malicious code in docker-centos-hello (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71090e29427fee974fae520d89e3e7df61c45f9cb63241c5b187c8cf5fd63556 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

kernel: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix possible use-after-free during activity update The Linux kernel CVE team has assigned CVE-2024-35855 to this issue. Upstream advisory:...

MAL-2024-10599 Malicious code in bytes-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52ffd94abfbfd2f2e971d55c6e01e3fa3ef3fa60ecd7d609df30f438fccd6bec The OpenSSF Package Analysis project identified 'bytes-guide' @ 99.3.5 npm as malicious. It is considered malicious because: - The package...

Malicious code in bytes-guides (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1671de27300530379441b59e870fa2d13121919510fe9f5ced2bb2a4dc2e6fe1 The OpenSSF Package Analysis project identified 'bytes-guides' @ 99.3.5 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10602 Malicious code in vis-trees (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5ebeaeff0143b51c900c7ccf5b61f993cc2667850f6cd3847fc3d3c00e80b952 The OpenSSF Package Analysis project identified 'vis-trees' @ 89.3.5 npm as malicious. It is considered malicious because: - The package...

Malicious code in vis-trees (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5ebeaeff0143b51c900c7ccf5b61f993cc2667850f6cd3847fc3d3c00e80b952 The OpenSSF Package Analysis project identified 'vis-trees' @ 89.3.5 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10590 Malicious code in a11-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 830a0f8d860411ad1f0a8802b96a54b0a02d75846fb60427a005ffd77c1ef84a The OpenSSF Package Analysis project identified 'a11-cloud' @ 89.3.5 npm as malicious. It is considered malicious because: - The package...

Rockwell Automation FactoryTalk View ME

RISK EVALUATION Successful exploitation of this vulnerability could allow a local low-privileged user to escalate their privileges by changing the macro to execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this...

MAL-2024-10584 Malicious code in yarn2nix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 926aa0eee20951e4172e721ccd2f312b8bf8b7f4618dd28b4f54cde9acdc76d8 The OpenSSF Package Analysis project identified 'yarn2nix' @ 1.3.4 npm as malicious. It is considered malicious because: - The package...

DS Browsers allvideo.downloader.browser 安全漏洞

DS Browsers allvideo.downloader.browser DS Browsers Fast Video Downloader: Browser is a video downloader from DS Browsers. A security vulnerability exists in DS Browsers allvideo.downloader.browser Fast Video Downloader: Browser version 1.6-RC1 and earlier versions. An attacker can exploit this...

MAL-2024-10555 Malicious code in careers-job-detail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16052b4d2e03953110406185695adc84ab3af8481eb5790e4b4c0f1421bc1b9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10552 Malicious code in airpay-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c58278d1a1134ca2368bd39a9425c1d5137f218539dfe6f346931927bc6e9a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10542 Malicious code in akita-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 551f04343832933628b5f36ec11b0f08219b6ad2c16bdc366b56ce2977b5f721 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...