CVE-2022-31188 Server-Side Request Forgery Vulnerability in Computer Vision Annotation Tool (CVAT)

CVAT is an opensource interactive video and image annotation tool for computer vision. Versions prior to 2.0.0 were found to be subject to a Server-side request forgery SSRF vulnerability. Validation has been added to urls used in the affected code path in version 2.0.0. Users are advised to...

[SECURITY] Fedora 36 Update: golang-github-client9-plaintext-0-0.9.20190703git5bf47e7.fc36

Extract human languages in plain UTF-8 text from computer code and markup...

MAL-2022-3077 Malicious code in flipper-server-companion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cc36f67e47eed26c8e683c17a848cb0f05ac8d340c8720e2f0e23fbf1d594bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Radioactivity monitoring and warning system hacked, disabled by attackers

The Spanish police arrested two people under the accusation of tampering with the Red de Alerta a la Radiactividad RAR. The RAR is part of the Spanish national security systems and in use to monitor gamma radiation levels across the country. The network is managed, operated and maintained by the...

Malicious code in lib-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 459880c4c4101dee13b2b38e89cc6c814a4bfd2a354774da5082b185b3478e08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testdorime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81419805eda3b6d8b6f339fb7919d9e066fe5bbbea95666b851ce53bac820fc5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3080 Malicious code in floureeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ee8cbffe126cf35dfa1679f96c925f2824d3453935d7a9cc0ec2bae8f45cb67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2572 Malicious code in dorimedepen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ac74bae8326d3737a7167ca777a0ec7292acc20c0cd5b2448486c93d0b4c90b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6616 Malicious code in totaralms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05c9db01a67113b6a65bda9e61a061e87b78052c4c25c020444d03f2f88d892c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4546 Malicious code in melar-dev-site (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e6525cad3c4d1bf0fc67eb122a33e6498564f679ce593c6392b9fb0d24500fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in razer-xdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 540be53be94e75262dc95e2abd0261bd691952d1b5efe267b276014d071217e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3740 Malicious code in hyperwallet-sdk-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c07de9253a4872758b8cb7ec4ec1694ce3105498eef8312573d0eb7ff5daeb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1583 Malicious code in bipiy74902-wx1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a8950277704e7285a7354800901af2f4221755dedd2f08be864709cf70e28c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5137 Malicious code in ot-daily-algorithm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 498245e71f08cf45b257ade99fc455f3a37bdc156a9849d8e6a79d7b40124605 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5139 Malicious code in ot-menu-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4719e9ae5efca357fd891b2be9fde0c17cd90faa6c67a1c4955e7e1f811cfe29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2230 Malicious code in create-ot-express-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 269d815f0f72dcbee5d8320d8fdc6dfb67256e41db6c462544a0fb234cfbf97c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6326 Malicious code in stringjs_lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 408657b4589508928485b1c6cb47eb32fe5964986aaa380196f80f7792356f1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1889 Malicious code in chat-orion-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4628213ffac8a813a7edc5f3695d74c53a07ac707ecdc13c21a753bf4a865a86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5120 Malicious code in order-link-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e28a5230468bc8c3e07c60c63b97c563acc4451ba8647e739e95688d0e52aa13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dedicated-servers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35c4b788f6715525b4725cb43dfd6d9a25dc72435296cd802ed01fcb0ff2d968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...