MAL-2023-8343 Malicious code in pragmaticplay-situs-slot-online-banyak-hoki-paling-terpercaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0bb9559484405e38427ba29fe4572ce1df42fa5a9932f8f785d2ed5295f3240 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Remote Code Execution (RCE)

mediawiki is vulnerable to Remote Code Execution RCE. The vulnerability allows an attacker to inject arbitrary code into a web page, potentially allowing them to steal user data or take control of the user's computer...

Cross-site Scripting (XSS)

mediawiki is vulnerable to Cross-site Scripting XSS. The vulnerability allows an attacker to inject arbitrary code into a web page, potentially allowing them to steal user data or take control of the user's computer...

MAL-2023-8168 Malicious code in @virtualsearchtable/virtualsearchtable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a3a14b80d767150f5d153e22bda4f1d264dc6005f8915ff7fa9f1d544615f07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7939 Malicious code in orbitplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx df1bde52050b0c84fcf4221afb1f77445edcbfc7e307f2eaf54fb104ce916f06 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

MAL-2023-1067 Malicious code in web3tool-rpc-methods (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e90705834b05e292cabf72529d908456c4f3768af2b34604147b5ac6ec38363 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-108 Malicious code in assets-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0980e797c7e6db1bd06873799b54350dd781176d8a2e104a7301a51053e3991b Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

Malicious code in chart-vxe (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 002bd97e07b258e0171a9659dd1196fa1fde9398bb98fd5ac8213b966f9e40df Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-437 Malicious code in fi-accounts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1387fb3ffd020ecb98336cda31726c3a524b418222999805b2f2fc75f23040c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-276 Malicious code in dow-load-get-your-sht-together-how-to-stop-worrying-about-what-you-should-do-so-you-can-fi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1489b4cf4cc1fbf7d46ce8501c4982c801c85e8eca95d879e1d668feb67589e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1005 Malicious code in zach-remadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67f50cccaa2f4485221ea7d325dccdcb0b35607b2a4a228bfea96442275bcb61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-491 Malicious code in hardhat-manage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c715606ed1f31065a073bcd5c09d01c86c31360cb2c2f583f93d5896dc06f188 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Design/Logic Flaw

The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious project file. This may allow an attacker to gain control of the user’s computer or gain access to sensitive data...

PT-2023-16013 · Weintek · Weintek Easybuilder Pro

Name of the Vulnerable Software and Affected Versions: Weintek EasyBuilder Pro affected versions not specified Description: The issue is caused by a ZipSlip attack resulting from decompiling a malicious project file. This may allow an attacker to gain control of the user’s computer or gain access...

MAL-2023-530 Malicious code in instantsearch-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a27501212cebbbed635898a691dbc8dedd8d342d3c41666ab78875dc496daca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-234 Malicious code in dep-conf-test-tal2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b97fd877e41e24812639dbd001e200927c3673576a2de4c71c76cde33df0dda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-240 Malicious code in dependancy_confusion_test2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 269b9df971bd3c661d32d61626eeffba4ded3144fa13d60f3f6acc010dcce776 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6429 Malicious code in tcm-one-tree (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b7f900ef8f753774bd695128ad350ff16b9f03c8c4d53ffea0f43dc61ae4c09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6652 Malicious code in trin-glob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56c9e7f483ead62263b1e462100a08e0fdaf68226df446c02499722e2c145b0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5718 Malicious code in rect-do (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b447ba6daef4aa0e85d42f4a1fbba15c155f9369a8a690a0b142b3ed113a0d6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...