MAL-2024-11176 Malicious code in spinal-lib-organ-monitoring (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 863fb7f679e57aab2356e5867fe4d9dd25e11f1c8ef2744b2e337bb0384d8696 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11166 Malicious code in eslint-config-sunset-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 042f734df520ee49c1cf44e40629e136159746964c87533d226f02be765e956e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

AES-SIV implementation ignores empty associated data entries

...

MAL-2024-10871 Malicious code in upload-to-shopee-cdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0d232d64d72c8cb600a13c7290d7c930b1062ba6ab4ebe1fbdab4130393473b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10794 Malicious code in seller-base.preview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddbcbd39fce83a9480abaad12bba49d263092e47fd23fb79d8058735439f16bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10775 Malicious code in react-is-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66059d9e879f615ec449be8496988b1e02f5bfdcf0ba355c2fba23a87777b494 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10719 Malicious code in libnpmpublishing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 000ac1f9e3e24873823d90fa6c4785583e0f65c86d7c26847dd8819079f1e6e7 The OpenSSF Package Analysis project identified 'libnpmpublishing' @ 99.3.5 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10766 Malicious code in people-ats-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64e0fee4f6a0a0bf955286caec236cb6fd226322649fd02497b95d91f14b4f7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10751 Malicious code in listing-uss-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bdefff07d9e9bd5fa8b0b524652775ca14bf5851937f5fa73f1e783996ad940 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10674 Malicious code in listing-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9721f8e927e787ea57b202a8a5b29ab1fd0cd530861055ad6a3e36a1c0df8d9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10631 Malicious code in hackerone000001 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8afd5e171e8a45a3d333e0d64cf1376ee51009fa4b030aaecd0437111bc57b10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10738 Malicious code in importlibs-resource (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e5b18ca50565bbf39ba25d92703302ffabb63cb0a0d6fde1934437d016d4cc0c A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10459 Malicious code in shadokv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 50a86371d91df819e5ed74554d58457de377043882b8ba9f98f71b7abfa006e4 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10481 Malicious code in cs-deploy-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc924b01d9d1492c726482e9cfb4985b29cfd9c8771d907af44c2d7351d1ff36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10421 Malicious code in tiketoken (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 55581da9bd7cef516932b5dde5a6245bc7a154ba11600d953dcc1128e762748f A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10475 Malicious code in babel-plugin-method-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29577c8ffc63866c4637065e68045167ad7f9d535d70f9d3cef45eaea4a00ffa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-51514

Vulnerability of pop-up windows belonging to no app in the VPN module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

MAL-2024-10361 Malicious code in v2mlx-gml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 00b9359396313be6a33f8efe51b60793b58c9f0cb6d2862e074d4109c33c107f A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10356 Malicious code in bytekafka-0-0-15 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4619fa745296f46998d4eb4e25a7f4841bdd8634ead366c63521d25abf739a7e A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10357 Malicious code in bytekafka-0-15 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5080a4abcce26e927e9647316733cd5313eb9422fbdcd3f971e539e62f9ccfb2 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...