MAL-2024-9334 Malicious code in ava-ilable-down-load-mp3-today-2013-10071-pure-heroine-vldvc-oyqobe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7003af9446fd5fa2fc8b3568b91decb0000e827a9b881a8b8e0154f0d98e9d3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9356 Malicious code in down-lo-ad-now-zip-mp3-7514-tapestry-fqgk2-jvvwtn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e313ea5904ea6421f91d9c6bd2eec5d8a7571283640ee280aa882e8eb90fa44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

scsi: ufs: core: Remove SCSI host only if added

...

MAL-2024-9333 Malicious code in aria-web-telemetry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16ad0cfe7b7d9636482741603c31ea841100db6c7a18a17bf08ecbafc906fd7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aspera-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4ffc4efa392a68f9bbb7a8e63541c73ca6199c288c1ddf01880986017469166 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-48915

Agent Dart is an agent library built for Internet Computer for Dart and Flutter apps. Prior to version 1.0.0-dev.29, certificate verification in lib/agent/certificate.dart does not occur properly. During the delegation verification in the checkDelegation function, the canisterranges aren't...

CVE-2024-48915 Agent Dart missing certificate verification checks

Agent Dart is an agent library built for Internet Computer for Dart and Flutter apps. Prior to version 1.0.0-dev.29, certificate verification in lib/agent/certificate.dart does not occur properly. During the delegation verification in the checkDelegation function, the canisterranges aren't...

MAL-2024-9296 Malicious code in shmam-mw-test-3-test-package-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b51f76988cbf6f57115b148f6bc499d56997dcb2eef0257e563fffbef11fd982 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dmall (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61365c65a680ddb23f6643fcbda3617d5dd977a74254aea0634952fd69d98a21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.jselfbot-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a61c990eea82ae2bbc613649aabde4884684f69fa4b649655cbee9e1e5018293 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9291 Malicious code in discord.js-dmall (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62ab6370d4446d65016c3888aa51ae06260295c23bfae0c44753dbb1c62f7b4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

scsi: qla2xxx: Complete command early within lock

...

Malware in ts-jest-starter-kit

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-9275 Malicious code in mallutrojan1002 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e33b70fdcdd4f04f7c9f3c54ffb09557c23d65d978a70168754e3a8ac82e2040 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in assistants-nextjs

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-9273 Malicious code in cbdev2024test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef4fe76ee823f88ab6484802e30511e9103d6953aabe83c7758dfd4197613fee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gcp-monitor-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8ac49f0f48f0a8f3b5ab417aeeeac247298e9ab4f211f88aadcca93bc624e58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9274 Malicious code in gcp-monitor-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8ac49f0f48f0a8f3b5ab417aeeeac247298e9ab4f211f88aadcca93bc624e58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9249 Malicious code in request-ip-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e096389994e4f977393f6e6f087f2fdaa9aae5f79ffaa89122d7e6bb72f083a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9245 Malicious code in pt-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce4c091ee99f34bd672788b16dab6db4b2d09b61bf4a01116168d840902586c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...