Malicious code in mp-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cff4fab9afd0251fc2a7551653c7605a21ecffc47bcfee194740e479aff3979 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in subspace-chatbot-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31bfcf245439a664e6089e8a70261797608614e43d5f4c36abd2cf737a4881d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sweet-ruin-immortals-after-dark-16-by-kresley-cole-on-audiobook-full-volumes- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6ddd212ce30f7b7db65579b6f4be56f10137c104c7ab63553566ccd90a1ff3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in as-rest-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00a576994460aeca57d9642938bbd4c214c2fc5138f9513388b070cb882fde29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in skippr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17931e9be59bf55777cf170ba341a0117af91b89b903c1927c18ff14a88f7b81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in glitchgoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8ea318097b9bd0a522dedb1104a0e50a0b0b270c5eb5db1e15a1bae67bfc036 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @digital-experience/test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26be8e6356ffa856692e9aa6cfa8b488f57d44be07cef5db057a521883825b42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-38305

Dell SupportAssist for Home PCs Installer exe version 4.0.3 contains a privilege escalation vulnerability in the installer. A local low-privileged authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary executables on the operating system with...

Dell SupportAssist for Home PCs 代码问题漏洞

Dell SupportAssist for Home PCs is a client application for home computers from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting and more. A code issue vulnerability exists in Dell SupportAssist for Home PCs version 4.0.3, which stems from the...

The vulnerability of AMI BIOS in Hewlett-Packard Development Company L.P.’s personal computers allows a perpetrator to execute arbitrary code.

The vulnerability of AMI BIOS in Hewlett-Packard Development Company L.P.’s personal computers is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Ukraine Warns of New Phishing Campaign Targeting Government Computers

The Computer Emergency Response Team of Ukraine CERT-UA has warned of a new phishing campaign that masquerades as the Security Service of Ukraine to distribute malware capable of remote desktop access. The agency is tracking the activity under the name UAC-0198. More than 100 computers are...

Microsoft Azure Connected Machine Agent 访问控制错误漏洞

Microsoft Azure Connected Machine Agent is a U.S. Microsoft Corporation's ability to manage Windows and Linux computers hosted outside of Azure on a corporate network or other cloud provider. An access control error vulnerability exists in Microsoft Azure Connected Machine Agent. An attacker coul...

Malicious code in incisive_testing_stufff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37f03819dee879740c46b3604769e69cdb0402e7b91eed0ae39079f3306d5bad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in module-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32effd819c82ee7e76761ba803d729c0bd089109f9a63210588b8bfb38a300fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7951 Malicious code in dx-feedback-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b36c60f033d9263462d60c68a8bc159f11180d85fe48bf2d13dbabfdf09fb356 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kaleido-event-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53d5af1457894ebaf8d8c44e57ae9046b4dc0e1183783bb191bb3123a0ed2fd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uitk-react-date-selector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de6ee4dca1959ae6d3b5effe21716f2df3684ac2456897446d0b0706dd26265d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in free-bets-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdf275b904e56648f3ac4145f510b98a807f68dc450526d67445bd9884373240 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uitk-react-scrollable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15932e6247991a719ff0f98bbb3b9d13ffa6458ac4bce5835a7a691f8b52a6e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7945 Malicious code in dataminr-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e328eea4d3ddfdb430fb8afcd7384887956a95d03a3881cf61c63609b6ec2b3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...