Malicious code in api_vinted (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e1ba9bbb303d41b2be5ebc420aa6800f1dda98e41f8a88147272f70289da802 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Beware, Developers: BlazeStealer Malware Discovered in Python Packages on PyPI

A new set of malicious Python packages has slithered their way to the Python Package Index PyPI repository with the ultimate aim of stealing sensitive information from compromised developer systems. The packages masquerade as seemingly innocuous obfuscation tools, but harbor a piece of malware...

MAL-2023-8479 Malicious code in rb-seatlayout-canvas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab7073e8386662ab584a412e7d011050e505dea8df14c0e5273606bf0a823ae1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8470 Malicious code in jest-coverage-report-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a570942cc8be879311bbb1b601f658554c30fa3734aacac08c1c53289da55bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8480 Malicious code in shithandler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd3d2d2f23f11e1a03fe9bbad28d2afea9ac0fabd63c4abfd437521e715fcfd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discordwebtest3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07fc6280f498cd214de7d4afd0a46edee0c887c1377a342ad31e365f736ed539 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8476 Malicious code in djsmusicccs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware faee99f36caafe35a81b552c8997b3489b6a731d17360948477d4c0f4ad27ce4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8475 Malicious code in discordwebtest3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07fc6280f498cd214de7d4afd0a46edee0c887c1377a342ad31e365f736ed539 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8445 Malicious code in @inventashif/workspace-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fe4fedd5d11a10d847f74fc3fa803fcacb0f7484be032ee6b87bdb61e84ed31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8459 Malicious code in inventashif (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32a263bef1edd455f940e5d1b4a29092587235bb0b932ee3037c52e5796beb3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8462 Malicious code in print-vault-browser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 367bf013409840485fdaebde8da15293906ece37c6c79fd8b03396935ac7a2a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ksm-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acbd11805012facf9e6ace839d7003088cf99552b9da073484d17920f72c5d9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8457 Malicious code in fa-icdc-form-api-bdt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24842401e160323f0909c7f6e561fbaa5cbdb6f3b5e3c0dfe2a4dd0fe1877e5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8450 Malicious code in airslate-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 187dae9cdc21ec49b7d2dd1609dcfe155123738e42a66793b16990e78bb18225 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8451 Malicious code in airslate-static.icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8abf1832c7d0a4193473be4adf31eaa434b0d49e675769a13b50c87a51652deb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8447 Malicious code in airslate-controls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 690f6f02456c41eb2e6abf2b8e2cac6a1480ef7107c64b0da3243848e4767365 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8433 Malicious code in stripe-terminal-react-native-dev-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 148f318d6453b35d5563824a26fe185c3df7e96f1a4f12089adbbb556e867459 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8431 Malicious code in gatsby-starter-gitlab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bc23995a775ff33fc2732574cfd95b0d8efee1cdcadd229b67acde3123fac5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8443 Malicious code in watchman-search-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9d31c46bc906a3eeb18b4852518f529d915f87ab7935775541759d38c18151e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

modell-und-computer.de Improper Access Control vulnerability OBB-3772531

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...