MAL-2024-7050 Malicious code in @freetime/core-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6e1ddad8237b58e27d13a7761696892692fb82793f5f7a7bd900c6397d96dbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7052 Malicious code in ajexx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 571809bf0902772fafad02862c5fd3b59f16582fdce11e1ceb684f3a81ef575d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cssyx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cc07cdb5493c10af0a9dc5d8dbab4946d341151061e3882edaea1181cb23923 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7055 Malicious code in lnx-integrity-check-prop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a2be1591ee055bb001b6d945290d1fd8e9d367bd1d7e1b96b0ab70031541cab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7056 Malicious code in sol-web3-1.45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fead2025caedfc146d1352524681288e1aa9b517e0bc6fba71c09ebe034d378 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1675 Malicious code in near-linkdrop-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ff40b77a91a8e45cd8e9541c0872d1e97a5e365768e2e6f34550d24f8c02fa0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1676 Malicious code in world-id-onchain-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23beae0d76f8d9d9ccbbe5079e8186b31119aa5d9ad66fe8fc49713db22dc4d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1673 Malicious code in gradient-tiny (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 072e069157bae3a21204a965538030cd1d107c5a79c9574cc9b663c06225b36a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1669 Malicious code in elitebots-prevnames (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3421b5fe5476f1e1cae544e279bf1731be45c2e887956ef9dca25d2a96dfb9e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in usaa-a11y-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94cf2756212b101be1ba0c0e7389ab4b2b9b569d01b26d652660a5217a8052ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in financialforce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa91fe1dfd39a76484d47f917480ebcdf367b75986b0f6ff244e57025dc09086 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in decode-2021-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d34838073a6c60e6980c2462e6fd5a775a631381a50aca2fe2f8e40addbbb336 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ai-chatbot-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af9d2068c841a174507d461d5d7113108623c8d971ee140701fe429feaf8e83c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

4 FIN9-linked Vietnamese Hackers Indicted in $71M U.S. Cybercrime Spree

Four Vietnamese nationals with ties to the FIN9 cybercrime group have been indicted in the U.S. for their involvement in a series of computer intrusions that caused over $71 million in losses to companies. The defendants, Ta Van Tai aka Quynh Hoa and Bich Thuy, Nguyen Viet Quoc aka Tien Nguyen,...

Malicious code in kami-richtext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9634fe3bee06c80f43ca27ad558c4834386dc1bb31779583c7911b679f550bff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1664 Malicious code in @elza/keepalive (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36898e173038cb4c2df4e969d539b9594821fc6f2c6b1c8750d717d5f637eea4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1663 Malicious code in @elza/auto-route-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0394416e392791c5f23be36b82f8800fa29bfd1381f8be67c7362338279c0d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-37825

CVE-2024-37825 concerns EnvisionWare Computer Access & Reservation Control SelfCheck v1.0. The Red Hat, NVD, CVE lists and related advisories confirm an unauthenticated directory traversal vulnerability that can be triggered by attackers on the same network. The issue is tied to SelfCheck v1.0 an...

CVE-2024-39334

MENDELSON AS4 before 2024 B376 has a client-side vulnerability when a trading partner provides prepared XML data. When a victim opens the details of this transaction in the client, files can be written to the computer on which the client process is running. The server process is not affected...

CVE-2024-39334

MENDELSON AS4 before 2024 B376 has a client-side vulnerability when a trading partner provides prepared XML data. When a victim opens the details of this transaction in the client, files can be written to the computer on which the client process is running. The server process is not affected...