Malicious code in sc-pattern-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cbcdc7facabe72ef42307c4747ea188fbeec7c3f4f2203bfab0770204dc01c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-W7HQ-F2PJ-C53G pyLoad vulnerable to remote code execution by download to /.pyload/scripts using /flashgot API

Summary The folder /.pyload/scripts has scripts which are run when certain actions are completed, for e.g. a download is finished. By downloading a executable file to a folder in /scripts and performing the respective action, remote code execution can be achieved. A file can be downloaded to such...

MAL-2024-9312 Malicious code in 52qr42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e559619ab6112e5213407ad80e432cfb2f9143718e79a18bf5c4f94d26ecf0d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in updated-today-gen-apex-legends-h-a-c-ks-f-r-e-e-glow-and-aimb-ot-safe-to-use-2023-ms0sfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41f8e217b061367a2544f69c657e9f3d6cc3535698498abe94f975e9147d708e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in multiple-keys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da4233e3b39779d62d23e578c4ceb25ff5a78a6f0285b709b91ef0cf36ed7d7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8905 Malicious code in temp240824 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8a7dd6aaf4dcfd18798c971ed85382e9df124ddf047164ea6b7580ac95d9301 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8799 Malicious code in rbds-frill-auth0-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 150dbdfd8f858852151c86f252e31bbb62cb7fdd4afb0babf23f9817a5a222ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/provident-eligendi-porro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9ce2bec0d76f7958679507cc49b1f3faf235c63fe8b497a422e9abd18c56155 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8327 Malicious code in @diotoborg/explicabo-laboriosam-maxime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55ef48ecbc216be6aa561723cf4641349fc2cb8f1a7073c919f6e78f4cd5ddf7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/nisi-suscipit-vel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ae1ff99e54a2fe8ce6f015abff8fb97a03e741752b0265d31b4d36bfc6d5dea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8700 Malicious code in @diotoborg/voluptatibus-impedit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f899aca45c84128990918b2b6dd9dd004f1c68c1247ccbe88cd9e4d2bd4641ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/dolorem-possimus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 594648a6e233b1180f89cb194e6ddf0cebf9f265ae0f11b2b6d13533ccfc1d52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7701 Malicious code in bootstrapcloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f67dc77b28b090be63a2162c508d3a69afe89f50c88f5310aaac6b7a8ddc8ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stylesheeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e689b39fcbd1dcf313116508aacf3c6f500651a7b60d276583e09895a98324e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7231 Malicious code in @zitterorg/incidunt-suscipit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4a388cde8bfdb2884b7cf2b08de2671f74c3813a18b004b53c27829e7fb6d57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vue-webviews (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a4cb498523fdac707f6db2f94f8c3478545fcec92545e4a59dff966b9cbaa87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1431 Malicious code in @juiggitea/eos-inventore-nulla-ab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74fbeaf3c7af8f0bbe206779c2e65ff8f8eae602e5b1212a02e3d42dd8291c30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/amet-cupiditate-fugiat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94f62fe064c189896bbcb72c87b6e37c6191013d4fa827ee24a85ba9abbcfc14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-34146

A flaw was found in the Jenkins Git server Plugin, involving inadequate permission validation for reading Git repositories over SSH. Through the manipulation of crafted requests, a malicious actor can attain unauthorized read access to a Git repository over SSH. Subsequently, they could utilize...

MAL-2024-1235 Malicious code in @lbnqduy11805/special-palm-tree (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6778e7c9334a7e067c8f10c134b7e24480404907e9ca6d5d4b1be43c81c8c563 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...