Malicious code in jetpack-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3790839f558d5d8b1639eb4af1dfcd0f8b856942399dfdc273a8c1e95676cbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4023 Malicious code in jetpack-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3790839f558d5d8b1639eb4af1dfcd0f8b856942399dfdc273a8c1e95676cbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4457 Malicious code in mailjet-react-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93fb770c6e4d41201a5a99a6c80f625e3841f7f5a30fbe615ae73112bc5d9dbd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mailjet-react-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93fb770c6e4d41201a5a99a6c80f625e3841f7f5a30fbe615ae73112bc5d9dbd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4456 Malicious code in mailjet-old-react-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f341e416859da201efd36b62dd26528ba230a7ab134f96c2944b2de103f7179f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lx-cockpit-components-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87f911bdccde93661ec10bace02fa2c48d01a185ea3feaa9b23d92769647cb96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4431 Malicious code in lx-cockpit-components-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87f911bdccde93661ec10bace02fa2c48d01a185ea3feaa9b23d92769647cb96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

be-iq_shared-styled-components (0.0.26) potentially affected by unknown CVE via plugin-transform-react-jsx (0.0.1-security)

plugin-transform-react-jsx NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on plugin-transform-react-jsx and may be impacted: - be-iqshared-styled-components 0.0.26 Source cves: unknown CVE Source advisory: OSV:MAL-2022-5373...

be-iq_shared-styled-components (0.0.26) potentially affected by unknown CVE via plugin-transform-react-jsx (0.0.1-security)

plugin-transform-react-jsx NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on plugin-transform-react-jsx and may be impacted: - be-iqshared-styled-components 0.0.26 Source cves: unknown CVE Source advisory: GHSA-X743-4V5W-FRPJ...

MAL-2022-2594 Malicious code in dropins-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5468c3460bcf8d254390c92d507e1a1881c9631dc0685efe500b7eb9b812b7df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dropins-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5468c3460bcf8d254390c92d507e1a1881c9631dc0685efe500b7eb9b812b7df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bigid-ui/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4155acf29ddb0adae2f2336b9511dcc46c60cb1f01b63e0aa629c87130a81c0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-119 Malicious code in @bigid-ui/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4155acf29ddb0adae2f2336b9511dcc46c60cb1f01b63e0aa629c87130a81c0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lead_front_components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e9019a4ceb308c1dc53c702bca160a47e5ace72ef7230b8d21a7e83ad73583a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6241 Malicious code in sportsbook-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 406d6055f3ec798d94c6267c0cd303138551c345c9b059490e045de4768579be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sportsbook-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 406d6055f3ec798d94c6267c0cd303138551c345c9b059490e045de4768579be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @goatapp/web-content-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e84e5e811d3fa4518a09e29f874e3c06261de0493410085336d5e0a717e078fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-292 Malicious code in @goatapp/web-content-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e84e5e811d3fa4518a09e29f874e3c06261de0493410085336d5e0a717e078fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: IBM Spectrum Conductor is affected but not classified as vulnerable by a remote code execution in Spring Framework (CVE-2022-22965)

Summary IBM Spectrum Conductor is affected but not classified as vulnerable to a remote code execution in Spring Framework CVE-2022-22965 as it does not meet all of the following criteria: 1. JDK 9 or higher, 2. Apache Tomcat as the Servlet container, 3. Packaged as WAR in contrast to a Spring Bo...

Haraj has cross-site scripting vulnerability

A cross-site scripting vulnerability exists in Haraj v3.7, a buying and selling platform from Haraj Saudi Arabia. The vulnerability stems from a lack of data validation filtering of user-supplied data and output in some DM components. An attacker could exploit this vulnerability to execute...