MAL-2024-9347 Malicious code in do-wnload-available-2014-20032-happiness-is-happening-2iby6-rsrcqq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cda9a14c57a889f64527676ba7f78ef36002bf04a2e1a80afd91784c4fdc969b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in file-alb-um-zip-new-mp3-126009-bitter-sweet-dz7i2-hidryu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a75501436f2395e00123299cf864bf5850d07617243e0205e60c4d3843110c26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9365 Malicious code in file-alb-um-zip-new-mp3-126009-bitter-sweet-dz7i2-hidryu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a75501436f2395e00123299cf864bf5850d07617243e0205e60c4d3843110c26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9378 Malicious code in mp3-do-wnload-file-to-day-32025-moss-side-story-zcimi-mvspdd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b123d08fd319f902d9638f0981c9302a2e7c8d43edf179c09571147eaa56bbd0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9340 Malicious code in avail-able-albu-m-down-load-11788-death-rattle-boogie-ekyyh-uwjkro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aac7cdb849f9db37226aaa900ef7c0bb1e4934bb5cc945318ed6b2c381a65429 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9335 Malicious code in ava-ilable-down-load-mp3-today-2017-64747-near-to-the-wild-heart-of-life-n5sic-lqeaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1eb2e3b8cb8e76a52b3c084dd367ab850cb06532d4dd602e38805bd4838655dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9399 Malicious code in zip-mp3-a-lbum-do-wnload-new-coexist-l4rjg-vsisft (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbda29687ce05eceb8a7140f99fe1073db44c499a2817a3334aba733cda1eb29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9390 Malicious code in new-al-bum-av-ailable-467736-headful-of-sugar-tu33k-ptkkpd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e39aaf466d2e987198ad020f9910fe30e6403907bfa5f751559f8bdbb4817a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9352 Malicious code in down-lo-ad-now-zip-mp3-149132-the-soft-cavalry-vhx8d-iuyuef (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb9336bf4e4bff4fc2fef14648dc8de3d521c49485d1a18aa7c83963866a2f59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9342 Malicious code in avail-able-albu-m-down-load-2014-19330-ultimate-painting-yx7k2-dkxzow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5a7296fbdfdba291f43b1412910adb21a14eeeb9f4aa7f69bcee0466370011d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9382 Malicious code in mp3-file-zip-d-ownload-33971-the-imagination-stage-ar0bb-cvzjxl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d397cb1db7e38b452c53b76a84ba968b5f74923158192a310862474b0bf7b0df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9381 Malicious code in mp3-do-wnload-file-to-day-5794-street-hassle-pf8jn-wucrqe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5537f6c773804ab8c3d8b516b7f60c16b9b59aa3d4819fbdc5286b416ed6433a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9377 Malicious code in mp3-do-wnload-file-to-day-273202-shadow-of-fear-t2vwz-niymvj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14ae460e22257b2e986bf08dcb67cb44de7a372e5e84275e6896a9ecc6818cb9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9386 Malicious code in mp3-file-zip-d-ownload-welcome-to-mali-ntp96-jgcurk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e7e81cbd6ad8ee7eb04588e6fec967a31ee4e9528bf73c5c1c3e5f53565645f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9356 Malicious code in down-lo-ad-now-zip-mp3-7514-tapestry-fqgk2-jvvwtn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e313ea5904ea6421f91d9c6bd2eec5d8a7571283640ee280aa882e8eb90fa44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9333 Malicious code in aria-web-telemetry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16ad0cfe7b7d9636482741603c31ea841100db6c7a18a17bf08ecbafc906fd7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-46843

...

Malicious code in aspera-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4ffc4efa392a68f9bbb7a8e63541c73ca6199c288c1ddf01880986017469166 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-48915

Agent Dart is an agent library built for Internet Computer for Dart and Flutter apps. Prior to version 1.0.0-dev.29, certificate verification in lib/agent/certificate.dart does not occur properly. During the delegation verification in the checkDelegation function, the canisterranges aren't...

CVE-2024-48915 Agent Dart missing certificate verification checks

Agent Dart is an agent library built for Internet Computer for Dart and Flutter apps. Prior to version 1.0.0-dev.29, certificate verification in lib/agent/certificate.dart does not occur properly. During the delegation verification in the checkDelegation function, the canisterranges aren't...