Malicious code in colors-2.2.2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2e9d4e592af561846333e6ba8b6ea0b44eaf7a158af7b1922d559e6ae3c1b5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1184 Malicious code in avax-js-cli-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20bcbb8282cba23d9c896b37231cedc6bae3b5042eff2693e1ee677525401345 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6373 Malicious code in swan-buyer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18d608806a404dd0e36025de82fbd1822bf6b05990eb4ffabce49be6614c41a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2558 Malicious code in dolphin-database (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d93e1e2aae05851554793d8482112dfc1c9485368c8e532351decdfea864f7db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-31188 Server-Side Request Forgery Vulnerability in Computer Vision Annotation Tool (CVAT)

CVAT is an opensource interactive video and image annotation tool for computer vision. Versions prior to 2.0.0 were found to be subject to a Server-side request forgery SSRF vulnerability. Validation has been added to urls used in the affected code path in version 2.0.0. Users are advised to...

CVE-2022-31188 Server-Side Request Forgery Vulnerability in Computer Vision Annotation Tool (CVAT)

CVAT is an opensource interactive video and image annotation tool for computer vision. Versions prior to 2.0.0 were found to be subject to a Server-side request forgery SSRF vulnerability. Validation has been added to urls used in the affected code path in version 2.0.0. Users are advised to...

[SECURITY] Fedora 36 Update: golang-github-client9-plaintext-0-0.9.20190703git5bf47e7.fc36

Extract human languages in plain UTF-8 text from computer code and markup...

MAL-2022-3077 Malicious code in flipper-server-companion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cc36f67e47eed26c8e683c17a848cb0f05ac8d340c8720e2f0e23fbf1d594bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Radioactivity monitoring and warning system hacked, disabled by attackers

The Spanish police arrested two people under the accusation of tampering with the Red de Alerta a la Radiactividad RAR. The RAR is part of the Spanish national security systems and in use to monitor gamma radiation levels across the country. The network is managed, operated and maintained by the...

Malicious code in lib-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 459880c4c4101dee13b2b38e89cc6c814a4bfd2a354774da5082b185b3478e08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testdorime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81419805eda3b6d8b6f339fb7919d9e066fe5bbbea95666b851ce53bac820fc5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3080 Malicious code in floureeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ee8cbffe126cf35dfa1679f96c925f2824d3453935d7a9cc0ec2bae8f45cb67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2572 Malicious code in dorimedepen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ac74bae8326d3737a7167ca777a0ec7292acc20c0cd5b2448486c93d0b4c90b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6616 Malicious code in totaralms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05c9db01a67113b6a65bda9e61a061e87b78052c4c25c020444d03f2f88d892c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4546 Malicious code in melar-dev-site (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e6525cad3c4d1bf0fc67eb122a33e6498564f679ce593c6392b9fb0d24500fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in razer-xdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 540be53be94e75262dc95e2abd0261bd691952d1b5efe267b276014d071217e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3740 Malicious code in hyperwallet-sdk-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c07de9253a4872758b8cb7ec4ec1694ce3105498eef8312573d0eb7ff5daeb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1583 Malicious code in bipiy74902-wx1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a8950277704e7285a7354800901af2f4221755dedd2f08be864709cf70e28c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5137 Malicious code in ot-daily-algorithm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 498245e71f08cf45b257ade99fc455f3a37bdc156a9849d8e6a79d7b40124605 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5139 Malicious code in ot-menu-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4719e9ae5efca357fd891b2be9fde0c17cd90faa6c67a1c4955e7e1f811cfe29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...