MAL-2022-1874 Malicious code in chainlink-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98f7c227698d07bc8f6d7cc5c45565f8971534e634ac4ee67bbdbe7275264ce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fuchsiaware (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8842cb191d45cb9732d7a513e45eb0a6c80d63598e97550fa8dec5090f83cb2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in elemental-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1a68aeaefed156f19d6f0c11e548a2123da4888d3617370086ca94f111d62fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in towo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9acfdc5d53a2f05e5d4eaa2ce6b5c0f2385b954bcc4901864ce68a17014fe848 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rjs-dev-fixture (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa289bddeb127c35209e9929cc2efe9aa0a2b5a24459dd7169a0535edd442f4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paypal-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2dbdf2f5ad866355a0a2188cfabf78be811027c4b9fd82b16212cfb3136e3bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zoe-sketchbook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 038bf8fcaa6279a489b7aef0c2258480091de3af84c00444b36df3ea3b96bfa9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hubot-awex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0979056c49e5558c7b7321c0110f39d6860988491f1e249849d3f02c85468387 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in token-allocation-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e70d4e91a48867bcbc30b11c2c29639e0305bff138d5414dcac1754ffbdaf6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mock-ea-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d913b2fd6105fcbc7d3b383008930640e91dfe852de474a79c618e6aa1962d8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ferris-design-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d39e6c2f612ba9f7a57f24e5c9f3bc6ebfb7bb77ff6cecfcec29132853cde13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @manomano-toolbox/toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f8ad568240473692aa6be29746503afc42eb55d6c98f814f2911c01fa046991 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@npmcli/arborist vulnerable to UNIX Symbolic Link (Symlink) Following

Impact Arbitrary File Creation, Arbitrary File Overwrite, Arbitrary Code Execution @npmcli/arborist, the library that calculates dependency trees and manages the nodemodules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and t...

mediationworld.net Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1163768 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

UBUNTU-CVE-2019-19234

In Sudo through 1.8.29, the fact that a user has been blocked e.g., by using the ! character in the shadow file instead of a password hash is not considered, allowing an attacker who has access to a Runas ALL sudoer account to impersonate any blocked user. NOTE: The software maintainer believes...