@chumager/itdfw-site-base (>=2.4.0 <=2.4.5), @simpleview/sv-mosaic (>=28.0.0-staging-2b964a <=38.0.1-62799cabb) +4 more potentially affected by CVE-2022-23461 via jodit (>=3.10.2 <=3.23.3)

jodit NPM version =3.10.2, =2.4.0, =28.0.0-staging-2b964a, =1.0.15, =1.0.0, =1.5.1, =1.4.58, =1.6.90 Source cves: CVE-2022-23461 Source advisory: OSV:GHSA-42HX-VRXX-5R6V...

Malicious code in bcp-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d40665444841376a0a6c7ae53c98702ba28e44423a029f7cf3a1cfc4db53a6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1483 Malicious code in bcp-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d40665444841376a0a6c7ae53c98702ba28e44423a029f7cf3a1cfc4db53a6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...