Malicious code in odyssey-commitlint (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in commitlint-config-ifood (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 82ce80367972231229038d234d1114c39f459b1c4bfe4a03392a3cfa35d4454b The OpenSSF Package Analysis project identified 'commitlint-config-ifood' @ 1.95.102 npm as malicious. It is considered malicious because: - The...

MAL-2022-287 Malicious code in @gettilled/commitlint-preset (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcbfb666aa11ddf3ca2fa71c1b576f37474993d06a8abb7ad0af2c7466691cd9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @gettilled/commitlint-preset

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @gettilled/commitlint-preset (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcbfb666aa11ddf3ca2fa71c1b576f37474993d06a8abb7ad0af2c7466691cd9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@atlauncher/atlauncher-scripts (>=0.1.0-18, <=0.1.0-19), @atomist/sample-sdm (>=0.5.1-atomist-update-latest-1540938130032.20181101043939, <=0.5.1-master.20181101044648) +415 more potentially affected by unknown CVE via lodash.merge (>=4.0.1, <=4.6.1)

lodash.merge NPM version =4.0.1, =0.1.0-18, =0.5.1-atomist-update-latest-1540938130032.20181101043939, =5.3.8, =3.1.0, =5.0.0, =5.2.7, =5.2.8, =6.1.1, =5.0.0, =5.0.0, =5.2.8, =5.1.1, =0.1.3, =6.2.6, =6.3.3 and more Source cves: unknown CVE Source advisory: GHSA-H726-X36V-RX45...

@blackbaud-bobbyearl/skyux-builder (>=1.10.0, <=1.10.1), @blackbaud/skyux-builder (>=1.10.1, <=1.31.0) +72 more potentially affected by CVE-2018-3721 via lodash.mergewith (>=4.0.3, <=4.6.0)

lodash.mergewith NPM version =4.0.3, =1.10.0, =1.10.1, =5.0.0, =5.2.8, =5.0.0, =5.0.0, =5.1.1, =1.3.0, =1.0.0-alpha.1, =1.0.4, =1.1.3, =1.0.0-alpha.4, =1.1.11, =1.0.3, =1.0.0-alpha.3, =1.0.0 and more Source cves: CVE-2018-3721 Source advisory: SNYK:JS-LODASHMERGEWITH-174137...