MAL-2024-10264 Malicious code in metadata-attacher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6eea908e9ca02abdc2e10b5fd9250bcece1ba385f9605460c33dcf8df855dfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tds-styled-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6fd1f1a79e054904c1996f83eaebf071439a273c6c1eb478e4f6c2fed1a2b58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in req-scope (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05048fd5770283947973e00b424f5a1810a67067ed3451a3bb5f9f5a5ce5d703 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10250 Malicious code in req-ban (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a9a1ab6f28d706cb286af274f9118a3e68076a1daca8d0c34a9499b9cbca5af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in luzmo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28ec2659d67186f0eebafb922f056460df73d8a793d632e70e66421f52a4fbf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10256 Malicious code in visma-connect-bv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 005faae12170fc7458fde90c1e389106818e875219f93719065488d5f10ff95a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in selfcord-v14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a55c578ea76b7795bf2336ca5deca359adbfef86c306c5c2a588dd5c59bbe187 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10253 Malicious code in selfcord-v14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a55c578ea76b7795bf2336ca5deca359adbfef86c306c5c2a588dd5c59bbe187 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10252 Malicious code in selfcord-js-v14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b0e9e33909863c6f23c6ce24eaf85fb8bed03f1fd45f930af826a2f8096b3aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from post-release reuse in ufshcscsicmd in ufs.c. There may be post-release reuse of stack variables...

MAL-2024-10233 Malicious code in dexter-angular-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6bf5598a2ab8cfa28dc285027cc8774d194d3b78d22da1d849cd6ef4d140d28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9462 Malicious code in owasp-aasvs-to-readthedocs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c0e5a6ea6ed26605b45a296a29db52bbfcd07788c446b2abdb5a77bbd80d2ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

No, The Chinese Have Not Broken Modern Encryption Systems with a Quantum Computer

The headline is pretty scary: "China's Quantum Computer Scientists Crack Military-Grade Encryption." No, it's not true. This debunking saved me the trouble of writing one. It all seems to have come from this news article, which wasn't bad but was taken widely out of proportion. Cryptography is...

MAL-2024-9457 Malicious code in module-with-node-gyp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad0399f36bb5f87a753f7cfc481eebea229a86f704ea5e7fe4b1c82bb19bf0a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9458 Malicious code in monday-react-quickstart-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eeeade5f5aa91633c87be63e8346db1068379e848dc4eee6832107dbb9f96cf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9455 Malicious code in csm-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64d16c1d6eb0822be5e65caced92f56b1f6160e2fafc6343c11694ce4eca80c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9445 Malicious code in reqstus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6858f823feb20338233b30f5457824614b65404d5b0d79c53c9a5d3fd534eda6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DEBIAN-CVE-2024-50026

In the Linux kernel, the following vulnerability has been resolved: scsi: wd33c93: Don't use stale scsipointer value A regression was introduced with commit dbb2da557a6a "scsi: wd33c93: Move the SCSI pointer to private command data" which results in an oops in wd33c93intr. That commit added the...

UBUNTU-CVE-2024-50025

In the Linux kernel, the following vulnerability has been resolved: scsi: fnic: Move flushwork initialization out of if block After commit 379a58caa199 "scsi: fnic: Move fnicfnicflushtx to a work queue", it can happen that a work item is sent to an uninitialized work queue. This may has the effec...

MAL-2024-9434 Malicious code in wagmi-connectors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1849feb5a54edcfb0734af9c632f95290165ddd026b3a748050d2b136f9d3fa9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...