Malicious code in @monkey-tilt/ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8ac39833535be0553f3d6a87a64286940b30b0fc55a5e1c80c907518b10053b8 The OpenSSF Package Analysis project identified '@monkey-tilt/ui' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

PT-2024-36621 · Dtex · Dtex Dec-M

Name of the Vulnerable Software and Affected Versions: DTEX DEC-M DTEX Forwarder version 6.1.1 Description: An issue was discovered in the com.dtexsystems.helper service, which handles privileged operations within the macOS DTEX Event Forwarder agent. The service fails to implement critical clien...

PT-2025-32136

Name of the Vulnerable Software and Affected Versions Powerline Communication Firmware affected versions not specified Description A memory corruption issue exists when processing specific files. Recommendations At the moment, there is no information about a newer version that contains a fix for...

Malicious code in start-decent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74681df6bc6b8b3247624569b8632e201a6fac47376cc8561d59fccc697d83ab The OpenSSF Package Analysis project identified 'start-decent' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in pokedex-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 23c03b4e03986cba75894fb0016bc2e1feb0c72ef2c06287030498b8f7a48ea1 The OpenSSF Package Analysis project identified 'pokedex-vue3' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-10972

Velocidex WinPmem (versions 4.1 and earlier) suffers from an Improper Input Validation vulnerability. The root cause is verification only at the start of a routine, enabling a userspace process with admin privileges to change memory page permissions mid-execution, potentially triggering a BSOD vi...

Malicious code in label-merge-conflicts-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0f4e7055373f34da86b2f4a870acff07073a74806372655dd69ac315c6c598d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11874 Malicious code in react-vis-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis add23f4d15e6249dcdf1487e1ba15a538376d6c820e7afecf316deaf47dbd959 The OpenSSF Package Analysis project identified 'react-vis-website' @ 1.1.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in react-vis-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis add23f4d15e6249dcdf1487e1ba15a538376d6c820e7afecf316deaf47dbd959 The OpenSSF Package Analysis project identified 'react-vis-website' @ 1.1.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11873 Malicious code in ui_next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 623f5936c73485ef7c1a60a9287d34cb92015b753a345a1e2989dfffcaf933ff The OpenSSF Package Analysis project identified 'uinext' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicate...

Malicious code in 32red-database (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61467e40b369ce42bb9addcd5f11f62f444c0a9cf8e30253f0d5ca79697c68a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 32red-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e16d461f49ce237448a5ebe2cecd68f816f19e3209965bc445d5e57a89ff938b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11863 Malicious code in 32red-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7c76ac7d57265d4cc494b13ff1a0000ff8cbe225dea90e42a200545dd8359e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 32red-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea3623ead06a5bd298fe1d4801b7c71c6729b130919b4eaf32b6f6ff94a7c1a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 32red-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ed89d9090f04408f9fe5a5788a75ae961c0e656eafa0ea294b9974471655b3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in orderly-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c6d1816f12ad3d52d2229d938ccf0f5ec2b0f48ba66613c031b72631e23cc77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11858 Malicious code in orderly-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c6d1816f12ad3d52d2229d938ccf0f5ec2b0f48ba66613c031b72631e23cc77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11856 Malicious code in 000webhost-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 725d2bf04ddf915f303fabf69710fc72dda0ebbd3d770b0d799f7cba032c98eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 000webhost-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 725d2bf04ddf915f303fabf69710fc72dda0ebbd3d770b0d799f7cba032c98eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 000webhost-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 264677b0730aa71c63a8f92c073c2b8b7a14b4a54d291ebbe883161a4f8af43f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...