MAL-2022-3901 Malicious code in internallib_v597 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa69655d82de7515197432b8b5f1a3282977de99e6f07a6d43ab980a2a01dfd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3269 Malicious code in ganache-cli-coverage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3cf5b4f2dfa6a2a564792989664d9c282942969da8def4b2021ecb8ccdca022 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

aktion21.at Cross Site Scripting vulnerability OBB-2884023

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-19398 · Apache · Apache Ofbiz

Name of the Vulnerable Software and Affected Versions: Apache OFBiz versions prior to 18.12.06 Description: The Solr plugin of Apache OFBiz is configured to automatically make a RMI request on localhost, port 1099 by default. In affected versions, an attacker may exploit this behavior by hosting ...

PYSEC-2022-252

The deep-translator project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained code which some environment variables and downloaded and ran malware at install time...

Ubuntu: Security Advisory (USN-155-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Okta Hackers Behind Twilio and Cloudflare Attacks Hit Over 130 Organizations

The threat actor behind the attacks on Twilio and Cloudflare earlier this month has been linked to a broader phishing campaign aimed at 136 organizations that resulted in a cumulative compromise of 9,931 accounts. The activity has been condemned 0ktapus by Group-IB because the initial goal of the...

MAL-2022-7232 Malicious code in wozhendeshitule (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a2c08f925c43ddd831ffec0cdefe5c61ffe38f79a484b19194db83a3096355c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

编号已被CVE保留

No details are available at this time...

MAL-2022-5848 Malicious code in rpety-ms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a861356d1e3f8e163562836f71abd647ac225b55c790db1ec223853ec5979a29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5718 Malicious code in rect-do (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b447ba6daef4aa0e85d42f4a1fbba15c155f9369a8a690a0b142b3ed113a0d6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5837 Malicious code in rollup-plugin-lnode-desolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9acf72eab56a54c7614500ece2ebfc40968084756762db5bffb1f207950dd083 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5840 Malicious code in rollup-pulgin-comsonjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f51e311c145a9753f0b9cb137dddc9e3bffb27b6cb502240c2b697d2028267ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5717 Malicious code in recsive-read9dir (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3295371fb4850c1492347758416a9d70a20fe52d59526b62a969c6537a69e535 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5082 Malicious code in onrmalize.cssl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c63161cb5ca58a17102d96cc331df9c98e601d3857fc9313620d07b526fc933 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4950 Malicious code in npomog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11cea4c37e2355743cce88829e6060b4f41f855a83587bb15d91d23fffdc1ad3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4939 Malicious code in npm-run-lal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a01d99608ddf590892902356233f88556d85bedfaf6508f312e9b7d54a69c23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4086 Malicious code in jusdac (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 131ccc11282b9f00ea8be1edec2e361631501dbf521ffd49d23587d484808cd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2791 Malicious code in eslinft-pluuin-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 724af609bd3a7b5b974a4abc0dd819a490c7f6c7ab2181f365a8b347ccf1130a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1409 Malicious code in babel-plugin-transfvrm-rvntime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a81b30912fad1ce99bf876e2494d9b453fb18c220c6bb64401b3ef47b177394 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...