1270 matches found
MAL-2025-277 Malicious code in calypso-babel-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b19b336747cffb6dcd17e2bdf7369eaeffb28fe85d0c8198710e89dbced26e94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in calypso-babel-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b19b336747cffb6dcd17e2bdf7369eaeffb28fe85d0c8198710e89dbced26e94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in babel-plugin-styled-componentsss (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5912584dcf93c8e94155d4393fdc3cd508541ab1c09a39e8ac2d4c2d93667f09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-164 Malicious code in babel-plugin-styled-componentsss (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5912584dcf93c8e94155d4393fdc3cd508541ab1c09a39e8ac2d4c2d93667f09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in babel-preset-app (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c7766597c4e69a6b6b08fb89e552f8cff845299eb1b612ef107e5f3fcb96156 Any computer that has this package install...
MAL-2024-12177 Malicious code in babel-preset-app (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c7766597c4e69a6b6b08fb89e552f8cff845299eb1b612ef107e5f3fcb96156 Any computer that has this package install...
MAL-2024-11169 Malicious code in language-babel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 868a15884f8fa2dcf7b6c3e4c90ba8f449da26537cb4a784fc76e22057c739f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in language-babel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 868a15884f8fa2dcf7b6c3e4c90ba8f449da26537cb4a784fc76e22057c739f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in babel-plugin-error-context (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7744d02644a699ae9c3fbb5c30c579ba65b94f7771206aa8c11b450ab048076f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10951 Malicious code in babel-plugin-error-context (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7744d02644a699ae9c3fbb5c30c579ba65b94f7771206aa8c11b450ab048076f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in babel-plugin-transform-vuex-analysis (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 661cbd3eaaae7ee5bb113192279e6ba2e72c5c5363fe668209893a70debd3248 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10694 Malicious code in babel-plugin-istanbul-shopee (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b297d163ed50548e4f9a48bd5b04af57e58f063fa67d58480f857b63b9ee0bcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10695 Malicious code in babel-plugin-transform-vuex-analysis (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 661cbd3eaaae7ee5bb113192279e6ba2e72c5c5363fe668209893a70debd3248 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in babel-plugin-method-version (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29577c8ffc63866c4637065e68045167ad7f9d535d70f9d3cef45eaea4a00ffa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10475 Malicious code in babel-plugin-method-version (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29577c8ffc63866c4637065e68045167ad7f9d535d70f9d3cef45eaea4a00ffa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
The Global Surveillance Free-for-All in Mobile Ad Data
Not long ago, the ability to digitally track someone’s daily movements just by knowing their home address, employer, or place of worship was considered a dangerous power that should remain only within the purview of nation states. But a new lawsuit in a likely constitutional battle over a New...
Security Bulletin: IBM Cognos Analytics Mobile (iOS) is affected by multiple vulnerabilities
Summary There are vulnerabilities in Open Source Software OSS libraries consumed by IBM Cognos Analytics Mobile. These issues have been addressed by upgrading or removing the vulnerable libraries. Additionally, vulnerabilites related to CORS misconfiguration and Certificate Pinning have been...
The vulnerability of the path.evaluate() or path.evaluateTruthy() function in the compiler for writing Babel JavaScript code allows a malicious actor to execute arbitrary code.
The vulnerability of the path.evaluate or path.evaluateTruthy function of the compiler for writing Babel JavaScript code is related to improper comparison. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
ROS-20241001-16
The compiler vulnerability for writing Babel JavaScript code is related to the use of plugins that rely on Babel's internal path.evaluate or path.evaluateTruthy methods. Exploitation of the of the vulnerability could allow an attacker to execute arbitrary code...