MAL-2023-249 Malicious code in dextools.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d58b956d093d028540f8fc9d9c35c21bfa0c7c42adaeb771c01b3d3478db32b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-667 Malicious code in pancakeswap.com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ed4f770da2ab0c43d3ba1150413eb348baf592a6d51e3472b5446a11728745f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dependancy_confusion_test_tal2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73729039e4d85fe520736702b47a1c7279bbcc907a4d902a3ca114a800afc943 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-234 Malicious code in dep-conf-test-tal2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b97fd877e41e24812639dbd001e200927c3673576a2de4c71c76cde33df0dda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-242 Malicious code in dependancy_confusion_test_tal2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73729039e4d85fe520736702b47a1c7279bbcc907a4d902a3ca114a800afc943 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-243 Malicious code in dependancy_confusion_test_tal3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c56293eb90ae309c58adb4cbfd852c54166ebcba11b6f6f6e5c64ce5a623c24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-240 Malicious code in dependancy_confusion_test2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 269b9df971bd3c661d32d61626eeffba4ded3144fa13d60f3f6acc010dcce776 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-227 Malicious code in data-privatelink (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2636aeb170b72bb394eb2f909679fea214cf2b85dd8cad2d6678e334e70eacd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-318 Malicious code in evolve-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f91172e8ea3922e0774dbdd5e55592c05035e0ea441f8064c3e163dd81dcd85e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hsbc-pb-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68ebe89705d558966c9f1db1e54b394a9e60bfe6e26d00f31d9d5869849954ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-157 Malicious code in canopy-common-fo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd983235acbe60ea7ab43744193a666e61c5bc35a50e7332217b14925f9d557c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-585 Malicious code in maw-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e087ddeaa6fa26778dc4e7f70a99bcca922ebb491a7166039a58392e118e5f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-472 Malicious code in generic-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7f87fcdafcf972ad5460dfd5d8fca046c5d3c1545f8725f7dc18174de69c362 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-176 Malicious code in chrome-extension-message-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 422f9abdd9d35628def10118ea6412b99c816f1ec94c49b3596d5fb8feef5d7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-438 Malicious code in fi-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc495fa631684eaf2b2e11d0085de9a7332542b9bac2dfd45f640105def65103 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-22472 Nextcloud Deck Desktop Client is vulnerable to Cross-Site Request Forgery (CSRF) via malicious link

Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. It is possible to make a user send any POST request with an arbitrary body given they click on a malicious deep link on a Windows computer. e.g. in an email, chat link...

CVE-2023-22472

Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. It is possible to make a user send any POST request with an arbitrary body given they click on a malicious deep link on a Windows computer. e.g. in an email, chat link...

MAL-2023-51 Malicious code in @playgami/portal-design-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cbc0f6c9ec3f2dc197d3ba4f4ebc88eb6cb72e8f15865b9f29bb673a82610bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-52 Malicious code in @playgami/portal-dynamic-copy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9deabd3b5198948a51a1c164772947fe70aa65670b1ca24263fad525b65cbfc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-48 Malicious code in @playgami/eslint-config-portal-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c59a96f0bdbc11422cdba0cabcb9398d163b3732d5d14f173849e14273bc717e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...