MAL-2023-437 Malicious code in fi-accounts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1387fb3ffd020ecb98336cda31726c3a524b418222999805b2f2fc75f23040c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-276 Malicious code in dow-load-get-your-sht-together-how-to-stop-worrying-about-what-you-should-do-so-you-can-fi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1489b4cf4cc1fbf7d46ce8501c4982c801c85e8eca95d879e1d668feb67589e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1005 Malicious code in zach-remadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67f50cccaa2f4485221ea7d325dccdcb0b35607b2a4a228bfea96442275bcb61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-491 Malicious code in hardhat-manage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c715606ed1f31065a073bcd5c09d01c86c31360cb2c2f583f93d5896dc06f188 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Design/Logic Flaw

The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious project file. This may allow an attacker to gain control of the user’s computer or gain access to sensitive data...

PT-2023-16013 · Weintek · Weintek Easybuilder Pro

Name of the Vulnerable Software and Affected Versions: Weintek EasyBuilder Pro affected versions not specified Description: The issue is caused by a ZipSlip attack resulting from decompiling a malicious project file. This may allow an attacker to gain control of the user’s computer or gain access...

MAL-2023-530 Malicious code in instantsearch-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a27501212cebbbed635898a691dbc8dedd8d342d3c41666ab78875dc496daca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-240 Malicious code in dependancy_confusion_test2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 269b9df971bd3c661d32d61626eeffba4ded3144fa13d60f3f6acc010dcce776 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-234 Malicious code in dep-conf-test-tal2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b97fd877e41e24812639dbd001e200927c3673576a2de4c71c76cde33df0dda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6429 Malicious code in tcm-one-tree (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b7f900ef8f753774bd695128ad350ff16b9f03c8c4d53ffea0f43dc61ae4c09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6652 Malicious code in trin-glob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56c9e7f483ead62263b1e462100a08e0fdaf68226df446c02499722e2c145b0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5718 Malicious code in rect-do (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b447ba6daef4aa0e85d42f4a1fbba15c155f9369a8a690a0b142b3ed113a0d6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3108 Malicious code in formidblue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eedeef4b45669cc8a65d4680d56227009e17b076f0520633ab6b3015fd7267c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5692 Malicious code in reactlifecyclesycompat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f80db4ff622e52aec89f01b213625738a60643fb955cf5c71efedb7b3ebfaea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1131 Malicious code in asfsertx-plus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a49b7d06d31ef7979fdb676610500500402205c27c88c9c583a9cd81b5aed02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4672 Malicious code in momenttimezhone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bfd694b2f4f236edf8c20db2915260b07a9b556033ebe5f579dd8253fd58e09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1147 Malicious code in astar-portal-test-depconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b9c5f93067160165ebf70fcecf77c1ac03707925f207d1b79fc6d7a4786ea91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2407 Malicious code in deere-ui-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4872d39ec3fd4c04d5d042ba001480f7e3d8cc24fe7f7e8b5951300aa6ddfd3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1042 Malicious code in api-routes-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa098cf98014efb5822c9283caad8c78740b5592ec51aad691cb5e225282bf59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6293 Malicious code in starbuckssystem.website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5c3b684ff09f55f7a42805fb292e795100ead7576f8ab8af399dd0991721c68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...