MAL-2022-2407 Malicious code in deere-ui-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4872d39ec3fd4c04d5d042ba001480f7e3d8cc24fe7f7e8b5951300aa6ddfd3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2776 Malicious code in equipment-color (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3407a23fc3cc61936f89d5486c466c993a250e52c464d3066026122fd8f8a2ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2400 Malicious code in deere-map-features (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecf01480d483812d03ead6ec633c050d070eb0b88e31cedfdf174cf90012e914 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-0902

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal', Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in flow computer and remote controller products of ABB RMC-100 Standard, RMC-100-LITE, XIO, XFCG5 , XRCG5 , uFLOG5 , UDC...

Path traversal

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal', Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in flow computer and remote controller products of ABB RMC-100 Standard, RMC-100-LITE, XIO, XFCG5 , XRCG5 , uFLOG5 , UDC...

CVE-2022-0902 ABB Flow Computer and Remote Controllers Path Traversal Vulnerability in Totalflow TCP protocol can lead to root access

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal', Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in flow computer and remote controller products of ABB RMC-100 Standard, RMC-100-LITE, XIO, XFCG5 , XRCG5 , uFLOG5 , UDC...

CVE-2022-0902

CVE-2022-0902 affects ABB Totalflow flow computers and remote controllers (RMC-100 Standard/LITE, XIO, XFCG5, XRCG5, uFLOG5, UDC). The issue combines path traversal and command-injection vulnerabilities in the proprietary Totalflow TCP protocol, allowing a remote attacker to insert and run arbitr...

Malicious code in totally-legit-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7beb17014129818ff75cbfeca6fea9bfe8da06e852f3631a1d110035de7c6317 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6940 Malicious code in virtru-typography (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76d296612ed6a798d82655b80032df811ba56f71cc56a47b5489f89ebf69daf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-dep-conf-my (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2960498bfa67e98a3989cbd03788d73c13cc5c55d9d7a5cca5b9b9569b926673 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-838 Malicious code in activity-iframe-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94f7b42aa01fdd5c7d433b8266287d4d592293312d50730555fc6410cf8e1cf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3850 Malicious code in insomnia-plugin-simple-hmac-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82257b4c71933f16336920865f08941bf1fd250ffd06dd3e34a99e3319b78012 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1042 Malicious code in api-routes-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa098cf98014efb5822c9283caad8c78740b5592ec51aad691cb5e225282bf59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paper-toolbar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67e54c851a1a002db9d6f77e8c5afb5d967ca7df824f482e2e44c51aeb9ab9e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5209 Malicious code in paper-toolbar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67e54c851a1a002db9d6f77e8c5afb5d967ca7df824f482e2e44c51aeb9ab9e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-535 Malicious code in @proto-services/banking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 287c482c1bc2e6beee2f3c527f4fa2333ff7e8c00800919fe40fa31ed2d3eda6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-536 Malicious code in @proto-services/integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 781f9096c26b10d421c4f8763732e2a62d6a4347fd0122fb2c8935dc00b3ea81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5843 Malicious code in rondo-saga (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c834b76d7f6c4c27ff4b6eddb1526e4bbdf0776789432acdb0f8c715fd2cabb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-259 Malicious code in @exnessimus/hooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce3949c509aecf530ab224e6627260a41b8cc0ff59edc392f8820a7dfd36bf0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-502 Malicious code in @pingone/net (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b034c29b3becd2d3619e28b984139f85ed7d62e1ab8fd2d0eeb30d54571102a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...