Lucene search
+L

3329 matches found

Github Security Blog
Github Security Blog
•added 2023/09/11 7:52 a.m.•3 views

Malware in @huoshanjiebai/ethereumjs-utill

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2023/09/11 7:51 a.m.•1 views

Malware in ethereum-cryptograph

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSV
OSV
•added 2023/09/06 7:45 a.m.•15 views

MAL-2023-8057 Malicious code in @ks-radar/radar-error-collect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a7e2199870f46f65ae301b77a8853c7c0203492bd65638277944190b9b406d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/09/01 12:34 a.m.•8 views

Malicious code in emon78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81f0edc650da505afa8dc8f6771ea545e69d9082314fd142e36e647658943fdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2023/08/31 1:49 a.m.•4 views

Malware in @manomano-internal/toolbox-pkg-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/08/29 2:17 a.m.•5 views

Malicious code in colors-enviroment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29ac8d849a43df619a8ae11f9774485d716cda8c540cd95729aaf9344e2cf476 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/08/29 1:58 a.m.•10 views

Malicious code in ductai-chatbot-community (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27c77e0ede4c194a2280a25afb09eab42f56783293849e1ceb66bb39b6f62477 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2023/08/28 2:04 a.m.•23 views

MAL-2023-7927 Malicious code in @intact-lab/ngx-iceberg-links (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55d4c2e5564fb8d843d5672f7952d370ab93e26d7c031567fc4db522c21ce0b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/08/24 5:16 p.m.•8 views

Malicious code in @dpdgroupuk/design-space-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d6e51ab6c7050e707d28d79d239a607feea9a777c9db5f9a4765ead15613168 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2023/08/24 1:27 a.m.•4 views

Malware in fca-supportbot

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2023/08/22 4:52 a.m.•2 views

Malware in @rsi-core-services/rsi-authorization-client

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2023/08/21 3:43 a.m.•2 views

Malware in fca-nayan-remake

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSV
OSV
•added 2023/08/21 3:32 a.m.•14 views

MAL-2023-1514 Malicious code in corporate-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d338cc997e0f56baeafd5773af498e1e559144af5aa4319bb9f939aa7f3c934b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/08/21 3:19 a.m.•8 views

Malicious code in as-ui-deals (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59a46a45592f6c5043e6aa80e3fca0f987b6fad0cd0078499ea75823075847c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2023/08/21 2:30 a.m.•19 views

MAL-2023-1525 Malicious code in test-result-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be46efd7d71b6494d55cf52ec783c591c2bfe3524cdfcc6a9d17ed75abb8d492 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2023/08/21 2:27 a.m.•3 views

Malware in ent-disclosure

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/08/16 12:00 a.m.•8 views

Malicious code in hh-dep-monitoring (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ac7b27f86bac41db082963b72360f1c159fa5ecbaf4a72d766ae92548df697f3 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

7.1AI score
SaveExploits0References6
OSV
OSV
•added 2023/08/16 12:00 a.m.•15 views

MAL-2023-7939 Malicious code in orbitplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx df1bde52050b0c84fcf4221afb1f77445edcbfc7e307f2eaf54fb104ce916f06 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

7.2AI score
SaveExploits0References6
OSV
OSV
•added 2023/08/16 12:00 a.m.•20 views

MAL-2023-7931 Malicious code in career-service-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d053ab0c6c3eb4184d3e98ecd922d23cc351f70a7df8a410d1271644721481ac Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

7.2AI score
SaveExploits0References6
OSV
OSV
•added 2023/08/15 1:55 a.m.•12 views

MAL-2023-1482 Malicious code in skills-strategy-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebcc0eeaf4ecce1ac92d3ddc71e3adce6e38bb842af9643c39eb9da89492ba71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Rows per page
Query Builder