MAL-2024-8070 Malicious code in commitlint-preset-halo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b7e833bc850b9e63b0465ff039204c0ffca31632fd1c5fec4e2b3e32e8f0878 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in odyssey-commitlint (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2783 Malicious code in odyssey-commitlint (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in commitlint-config-ifood (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 82ce80367972231229038d234d1114c39f459b1c4bfe4a03392a3cfa35d4454b The OpenSSF Package Analysis project identified 'commitlint-config-ifood' @ 1.95.102 npm as malicious. It is considered malicious because: - The...

Malicious code in @gettilled/commitlint-preset (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcbfb666aa11ddf3ca2fa71c1b576f37474993d06a8abb7ad0af2c7466691cd9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-287 Malicious code in @gettilled/commitlint-preset (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcbfb666aa11ddf3ca2fa71c1b576f37474993d06a8abb7ad0af2c7466691cd9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@blackbaud-bobbyearl/skyux-builder (>=1.10.0 <=1.10.1), @blackbaud/skyux-builder (>=1.10.1 <=1.31.0) +72 more potentially affected by unknown CVE via lodash.mergewith (>=4.0.3 <=4.6.0)

lodash.mergewith NPM version =4.0.3, =1.10.0, =1.10.1, =5.0.0, =5.2.8, =5.0.0, =5.0.0, =5.1.1, =1.3.0, =1.0.0-alpha.1, =1.0.4, =1.1.3, =1.0.0, =1.1.11, =1.0.3, =1.0.0, =1.0.0-alpha.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5947-M4FG-XHQG...

@atlauncher/atlauncher-scripts (>=0.1.0-18 <=0.1.0-19), @atomist/sample-sdm (>=0.5.1-atomist-update-latest-1540938130032.20181101043939 <=0.5.1-master.20181101044648) +415 more potentially affected by CVE-2018-16487 +1 more via lodash.merge (>=4.0.1 <=4.6.1)

lodash.merge NPM version =4.0.1, =0.1.0-18, =0.5.1-atomist-update-latest-1540938130032.20181101043939, =5.3.8, =3.1.0, =5.0.0, =5.2.7, =5.2.8, =6.1.1, =5.0.0, =5.0.0, =5.2.8, =5.1.1, =0.1.3, =6.2.6, =6.3.3 and more Source cves: CVE-2018-16487, CVE-2018-3721 Source advisory:...