Lucene search
+L

3329 matches found

OSV
OSV
•added 2023/08/01 1:02 a.m.•18 views

MAL-2023-1033 Malicious code in eslint-plugin-scp-custom-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8860b8044f2adb9c969cdcf764976c8f9e110be9d0b0a03d095998595aec3938 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2023/07/31 3:07 p.m.•18 views

MAL-2023-1030 Malicious code in coinbase-wallet-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1892cfeefb3909aa3aed58c0112f2bc9fcb0a762f2242e57c991846a6b8bc875 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2023/07/31 7:38 a.m.•11 views

MAL-2023-1025 Malicious code in elastic-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbe3c8eb7407200d7e0976f17ba59d709e62dba4fc1291d71efa92c6761c466e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2023/07/31 4:49 a.m.•3 views

Malware in docusaurus-plugin-matamo

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2023/07/31 4:49 a.m.•3 views

Malware in docusaurus-template

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/07/31 3:01 a.m.•6 views

Malicious code in fca-rbtd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cddd8e79f7a9a1a19529d126d9dd2e680dbd2eb4a6f10fd40319b957b9bc4864 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/07/30 4:18 p.m.•8 views

Malicious code in azuretestpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7deb9b5c64a12562c3e7da95ffdfda5b85dca927880cb96345033abab09d4f08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OSV
OSV
•added 2023/07/30 4:18 p.m.•14 views

MAL-2023-1119 Malicious code in azuretestpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7deb9b5c64a12562c3e7da95ffdfda5b85dca927880cb96345033abab09d4f08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/07/28 3:39 a.m.•9 views

Malicious code in ethersjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb61e79bc4e6f2ae62699c5ffbdfe08ad8644f715927068e36e3a229e020c970 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/07/28 12:15 a.m.•7 views

Malicious code in very-bad-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2289bce399400ee41a568ffb19da6c2728513c5f5a8e3f818532bb7b4978d8ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2023/07/28 12:15 a.m.•2 views

Malware in imposter-pkg-poc

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSV
OSV
•added 2023/07/28 12:15 a.m.•13 views

MAL-2023-936 Malicious code in very-bad-transitive-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a9acc8ba367a82af4fdbd34224c7bd392db0ce1df3885c0b4ff0de151e2baac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/07/25 9:29 a.m.•6 views

Malicious code in hui-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f81760275602834d1c25fb34cf1add0b3fa5f8c21159848716f9d647cc9b6db5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OSV
OSV
•added 2023/07/24 6:18 a.m.•14 views

MAL-2023-401 Malicious code in fca-innova (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dae1d312610e319d7fb61e20452f0003de964afa226f8d6db19b7b40bb8f4af4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/07/24 5:52 a.m.•9 views

Malicious code in expressautomations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aec539f05cce60ebaee5568d0e4a2b2390e2d5ccbef3f43409bbd82e11e12d6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2023/07/24 2:48 a.m.•23 views

MAL-2023-390 Malicious code in fca-dong (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 869e5a7298ac33a7556237fc57e21644df6d5629aa7dcb99384fb50003fed574 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2023/07/18 1:33 a.m.•11 views

MAL-2023-930 Malicious code in ux-logging-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 649b80a17f0912d20e34627fb9fcb9ee23f7e5dcbe67f9082d4499956d68f3a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/07/14 6:08 p.m.•11 views

Malicious code in sportsbook-env-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d79654ab4931607762a27f2b9d074eb3e78eab79c6ae9d6799541d54612c3bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/07/14 1:02 a.m.•34 views

Malicious code in smooch-api-quickstart-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd19289d32dba6cc486601e216fa686c7ee52df61d81e7d085c91587d03fd007 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/07/14 12:57 a.m.•7 views

Malicious code in fca-anjelocyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72b538eb3ca50febd185d5eda1dc4a20a1e71a7d85ceea735f724a0bacab09db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Rows per page
Query Builder