Malicious code in twinit-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ef9e3b0a0b08d37d71d8ae72b71ed7cb9a2c57ad01a894ee4965147844a0a68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vagrant-s3-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95fdb622795c0f71d0fe9c1606e85995be5d8e5c7e1f8ab6fb05385be0324375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6887 Malicious code in vagrant-s3-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95fdb622795c0f71d0fe9c1606e85995be5d8e5c7e1f8ab6fb05385be0324375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6696 Malicious code in twinit-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ef9e3b0a0b08d37d71d8ae72b71ed7cb9a2c57ad01a894ee4965147844a0a68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in teamcity-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d43679749ce4f935d1aaf7ad46f0232c59de752ea62b9f231b9226b4b25e0480 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6435 Malicious code in teamcity-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d43679749ce4f935d1aaf7ad46f0232c59de752ea62b9f231b9226b4b25e0480 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in commerce-ml-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f148678a4bc3219a1164e129b11e2fca4b4d33b3974bd1db771904f18c6f2ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in artifactory-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9674a280d091d3ecb0071c6fc0687be3f01662dd45df2effce8d90143966703 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1124 Malicious code in artifactory-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9674a280d091d3ecb0071c6fc0687be3f01662dd45df2effce8d90143966703 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2120 Malicious code in commerce-ml-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f148678a4bc3219a1164e129b11e2fca4b4d33b3974bd1db771904f18c6f2ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ipdel-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2829290c7df7a75ae20a8c94a6927d6e450ab3eefaeabc23f2fc5f141fb6fd23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3950 Malicious code in ipdel-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2829290c7df7a75ae20a8c94a6927d6e450ab3eefaeabc23f2fc5f141fb6fd23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cdk-cli-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f9f4fe9064836db3994b0e2e6eb32cabfee5c17ae2e4a2eb2e333471854fcd0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1855 Malicious code in cdk-cli-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f9f4fe9064836db3994b0e2e6eb32cabfee5c17ae2e4a2eb2e333471854fcd0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-libraries/cdk-custom-resources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28aceef06911da19dfe5a1f64caabdef91e74dc144e17e81f52bd1894737a018 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2017-7869

GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdkpktread function in opencdk/read-packet.c. This issue which is a subset of the vendor's GNUTLS-SA-2017-3 report is fixed in 3.5.10...

PT-2017-17963

Name of the Vulnerable Software and Affected Versions GnuTLS versions prior to 3.5.10 Description The issue is caused by an integer overflow and heap-based buffer overflow related to the cdk pkt read function in opencdk/read-packet.c. This is a subset of the vendor's report and has been fixed...

PT-2017-2262

Name of the Vulnerable Software and Affected Versions GnuTLS versions prior to 3.3.26 GnuTLS versions 3.5.x prior to 3.5.8 Description The issue is related to a stack-based buffer overflow in the cdk pk get keyid function, which can be exploited by remote attackers using a crafted OpenPGP...

CDK Backdoor Detection

The remote host appears to be running CDK, a backdoor that can be used to control your system. This suggests the host has been been compromised. A remote attacker can control the system by connecting to this port and sending the password 'ypi0ca'. C Tenable Network Security, Inc. Thanks to Xavier...