Malicious code in aliyun-sls (RubyGems)

--- Credit: OpenSSF source...

MAL-2024-6578 Malicious code in aliyun-sls (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aliyun-sls_sdk (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aliyun-sls (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious Package

Overview aliyun-sls is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using aliyun-sls...

@aliyun-sls/sql (>=0.2.9-dev-10, <=0.3.10-dev-9), @authereum/resolution (>=1.10.4-beta.0, <=1.10.4) +158 more potentially affected by CVE-2020-7596 via codecov (>=1.0.1, <=3.6.1)

codecov NPM version =1.0.1, =0.2.9-dev-10, =1.10.4-beta.0, =1.0.0, =0.0.1, =0.0.1, =0.1.2-dev-1, =1.0.0, =0.0.29, =1.0.0, =1.0.10, =1.0.18, =1.0.0, =1.0.12 and more Source cves: CVE-2020-7596 Source advisory: MEND:CVE-2020-7596...