MAL-2022-4424 Malicious code in lusha-ui-components-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa9f9d0ba99666d4d11e0f3fbfc797f53cdc33def310cfb00479955631833669 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5210 Malicious code in papiea-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5f20c8e1e8ca9603cd84d3f5a47188027d628baeceaaec42674d58fb2a0fc6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6209 Malicious code in some-buidler-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4364b95f692a6e68b922ca085cbc8a044375bad015acc427396adf15e6705f99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5112 Malicious code in optional-dep-wont-be-found (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2226cdc4dac73c40bc10584ecdb520dfdf47b568418de61acf37fd8cef42daf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4117 Malicious code in katt-blueprint-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdbbe344f9bbe3c02a30721cb02fa4b35a267f38226c55eee6745057af1da1ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-351 Malicious code in @illuvium/illuvium-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9eed70e2bd47f0eda3eb3371beaee77980d2ff91bb704f02c60bec201da34603 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3013 Malicious code in fetch-string (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ae97c4c34e165dcc455869fbf2da4d3535aff6c425c2add9379cd2b8b9cfe7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

perthcomputersolutions.com.au Cross Site Scripting vulnerability OBB-2835689

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2022-5683 Malicious code in react_popper_old (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e281af61adcbe405037f7cac58495892a35fb0370322dbe5db6b15825d8ce18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in quest-bee-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 554817dcee33cd9d1832a7cf89456ca2d38f2c4f6e0c454f135842c0d2473aaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in marketplace-benchmarks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b007173bde965cf168de7c0496ea3a257c989e5ee2c9d5bd6eb1806324eb62b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4485 Malicious code in marketplace-benchmarks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b007173bde965cf168de7c0496ea3a257c989e5ee2c9d5bd6eb1806324eb62b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3326 Malicious code in gen-mapping (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4eec31ee330eb33aaa0bd7ce9a12d554bd6cad4d845e221ee1c01d5942a5ca3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6603 Malicious code in tokenary-web3-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f1e8a0777e06e63c14f7812c77bf6007cf1804e2e33f10d1e76b7b0ea34faf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in magic-internet-money (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3065bd17ca30e939b9bf955fa81882d1780a378815a851b615d44f5c042df38f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zksync-zkwallet-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1bd3b6b946e713de4e537f8421bca9683725288606ef784195ff2e5d01110aea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7398 Malicious code in zksync-zkwallet-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1bd3b6b946e713de4e537f8421bca9683725288606ef784195ff2e5d01110aea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

moretonbaycomputerrepairs.com.au Cross Site Scripting vulnerability OBB-2834641

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Intel NUC 安全漏洞

Intel NUC is a small minicomputer from Intel USA. A security vulnerability exists in Intel NUC Laptop Kits, which stems from incorrect initialization. An attacker exploited the vulnerability to elevate privileges...

The Truth About False Positives in Security

TL;DR: As weird as it might sound, seeing a few false positives reported by a security scanner is probably a good sign and certainly better than seeing none. Let's explain why. Introduction False positives have made a somewhat unexpected appearance in our lives in recent years. I am, of course,...