MAL-2022-1398 Malicious code in azurevmtest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 890f146dea86a92a4c19b00d773dc2211150a67804b433607b4e8cb45a43d389 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Information disclosure

An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgentTemplate.java, src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read permission to perform the...