MAL-2023-18 Malicious code in 3commas-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05c45a506a2aa2967edb76552c716759a7082f9147ee666c777b8b2c9ed8dc53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CSRF leading to delete Client API in API clients management

Description wallabag was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily delete API key via client/delete/id Proof of Concept history.pushState'', '', '/'; document.forms0.submit;...

SUSE CVE-2022-2469

GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client...

MAL-2022-3209 Malicious code in freekws-devportal-api-client-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 964e73152194b8926217ca3e0d90526fe2a0e1223ef4b99a45ebd367193ce1fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-2469

GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client...

Out-of-bounds

GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client...

CVE-2022-2469

GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client...

CVE-2022-2469

GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client...

Fedora: Security Advisory for golang-github-vultr-govultr-2 (FEDORA-2022-e674d52438)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious Package

Overview @kraken-frontend/kraken-api-client is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerabl...

Malicious code in tilled-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d123fddcb18367f3ca5df73ee43dfd1f0fff9b5755b07ed392f9f70e7f9797f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6572 Malicious code in tilled-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d123fddcb18367f3ca5df73ee43dfd1f0fff9b5755b07ed392f9f70e7f9797f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3213 Malicious code in frn-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6510b676b0a865d924429b9b3a41ad4365e754db47f2fa6b34f9305237b7aea2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in frn-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6510b676b0a865d924429b9b3a41ad4365e754db47f2fa6b34f9305237b7aea2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1831 Malicious code in carpenter-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73b80c64be64124594a8fbe7518c6cdc1a3d6b7708e35da5e78de3a95b896168 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in carpenter-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73b80c64be64124594a8fbe7518c6cdc1a3d6b7708e35da5e78de3a95b896168 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chainlink-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98f7c227698d07bc8f6d7cc5c45565f8971534e634ac4ee67bbdbe7275264ce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1874 Malicious code in chainlink-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98f7c227698d07bc8f6d7cc5c45565f8971534e634ac4ee67bbdbe7275264ce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in openstack-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31090ff688f4cfd0017eacf09e0f12f4f4e674cce06594cddfb2c91ffd21272d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5101 Malicious code in openstack-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31090ff688f4cfd0017eacf09e0f12f4f4e674cce06594cddfb2c91ffd21272d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...