MAL-2024-9356 Malicious code in down-lo-ad-now-zip-mp3-7514-tapestry-fqgk2-jvvwtn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e313ea5904ea6421f91d9c6bd2eec5d8a7571283640ee280aa882e8eb90fa44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9333 Malicious code in aria-web-telemetry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16ad0cfe7b7d9636482741603c31ea841100db6c7a18a17bf08ecbafc906fd7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-46843

...

Malicious code in aspera-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4ffc4efa392a68f9bbb7a8e63541c73ca6199c288c1ddf01880986017469166 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-48915

Agent Dart is an agent library built for Internet Computer for Dart and Flutter apps. Prior to version 1.0.0-dev.29, certificate verification in lib/agent/certificate.dart does not occur properly. During the delegation verification in the checkDelegation function, the canisterranges aren't...

CVE-2024-48915 Agent Dart missing certificate verification checks

Agent Dart is an agent library built for Internet Computer for Dart and Flutter apps. Prior to version 1.0.0-dev.29, certificate verification in lib/agent/certificate.dart does not occur properly. During the delegation verification in the checkDelegation function, the canisterranges aren't...

MAL-2024-9296 Malicious code in shmam-mw-test-3-test-package-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b51f76988cbf6f57115b148f6bc499d56997dcb2eef0257e563fffbef11fd982 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.jselfbot-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a61c990eea82ae2bbc613649aabde4884684f69fa4b649655cbee9e1e5018293 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dmall (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61365c65a680ddb23f6643fcbda3617d5dd977a74254aea0634952fd69d98a21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9291 Malicious code in discord.js-dmall (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62ab6370d4446d65016c3888aa51ae06260295c23bfae0c44753dbb1c62f7b4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-42287

...

MAL-2024-9275 Malicious code in mallutrojan1002 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e33b70fdcdd4f04f7c9f3c54ffb09557c23d65d978a70168754e3a8ac82e2040 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gcp-monitor-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8ac49f0f48f0a8f3b5ab417aeeeac247298e9ab4f211f88aadcca93bc624e58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9274 Malicious code in gcp-monitor-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8ac49f0f48f0a8f3b5ab417aeeeac247298e9ab4f211f88aadcca93bc624e58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9273 Malicious code in cbdev2024test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef4fe76ee823f88ab6484802e30511e9103d6953aabe83c7758dfd4197613fee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9249 Malicious code in request-ip-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e096389994e4f977393f6e6f087f2fdaa9aae5f79ffaa89122d7e6bb72f083a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9245 Malicious code in pt-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce4c091ee99f34bd672788b16dab6db4b2d09b61bf4a01116168d840902586c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9255 Malicious code in todomvc-app-css-alt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0c6d4197f21cc320b40acc6bd3816dbcb9c46fcfc93e32784f75f260ae8f80e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9228 Malicious code in duckc2-v5.3.3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b592408b0378349ea039f5609350090b988b983226d34cfdcb1a741768642c2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9230 Malicious code in duckc2-v5.3.6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1787f323cf8287cce75c9f98309dbf5edfb1721a840a920500ec0e0cdb6be06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...