MAL-2022-2582 Malicious code in dpd-returns-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6ef9bb6d12034b7105aa8e0bfc2ade917b80d7c6fa5f5aaa625cedbe7e3c3dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-506 Malicious code in @platform-apps/platform-ui-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8340f5601369b70181bf04a82752c94b2af124e29918d5724abbd93dabfbf503 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

多款ABB产品路径遍历漏洞

ABB RMC-100 and others are products of ABB Switzerland.ABB RMC-100 is a remote modular controller.ABB XIO is a microprocessor-based device.ABB XFCG5 is a differential flow computer. ABB RMC-100, XIO, XFCG5, XRCG5, uFLOG5, UDC A path traversal vulnerability exists that could allow an attacker to...

PT-2022-6145 · Abb · Rmc-100-Lite +6

Name of the Vulnerable Software and Affected Versions: ABB RMC-100 Standard, RMC-100-LITE, XIO, XFCG5, XRCG5, uFLOG5, UDC Description: The issue is related to Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' and Improper Neutralization of Special Elements used in a...

MAL-2022-1828 Malicious code in careem-captain-earning-experience (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f77f596f64dfcffc26baa4da9e2fa7da045133440eed8cbd593d3b5cad2f3e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-977 Malicious code in amplify-category-api-e2e-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12a35d0a8b1a0a8aec5fef2c0e459f6151837f40572441aa6110a0d5686cb858 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7191 Malicious code in wm-cookies-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d538066b0051af1f54e7f610555a094887e4cbe9703bb8c4276cf979e0d3230d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in html-live-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18cdba0865437fa8c8cb2d37623793279a392fea573039901a81de40f72d3b63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3693 Malicious code in html-live-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18cdba0865437fa8c8cb2d37623793279a392fea573039901a81de40f72d3b63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3808 Malicious code in indy-vdr-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 100d7d507e1de15d089d8a333266fbd1c2a02baa06348b81ee159fd787510d38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-68 Malicious code in @alice-bob/com.alice.adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90cad1ecdb82a3b682d758bf5ac96c012458d22c4632d480caff86f1790a207a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in remotepshell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90f0664f69bb83ec074fe455f3e75065d195dc09acdd8e4cd4947001b21fe9dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hwzpgf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9dd3a02aac35fb116e38063fb226a892d9f04b2a04a31b87ed32958adb247e7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3729 Malicious code in hwzpgf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9dd3a02aac35fb116e38063fb226a892d9f04b2a04a31b87ed32958adb247e7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

NSO Group’s Pegasus Spyware Used against Thailand Pro-Democracy Activists and Leaders

Yet another basic human rights violation, courtesy of NSO Group: Citizen Lab has the details: Key Findings We discovered an extensive espionage campaign targeting Thai pro-democracy protesters, and activists calling for reforms to the monarchy. We forensically confirmed that at least 30 individua...

Malicious code in alertmanager-discord (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c92529dfaccd07820ddd93ed2fec70a6d47f530856ae6a0b87780945480fb99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-928 Malicious code in alertmanager-discord (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c92529dfaccd07820ddd93ed2fec70a6d47f530856ae6a0b87780945480fb99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5009 Malicious code in obyte-witness (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a4debb3661ec42370ef86dee9ee2a1ab55e15aa1dcddd4504a5e88ce9d37eee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6069 Malicious code in sgn-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3b77ef9e4111690ff33a0b7319033c3b00d2fc28ff477a609ca1f2b739091fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6635 Malicious code in tranchess-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7db9e2f62dee5c8b0e2fa19e620493020b43a603202dba66b929c54b2a58302 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...