Lucene search
K

3448 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2023/06/13 3:58 a.m.3 views

Malicious code in tamagoshi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64a673f779a5fe9f0eda8a731f5cd030a5087fa11979fcbcbc4a52eb7afcbb05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/06/13 2:59 a.m.3 views

Malicious code in migrate-branch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17f00afb76676c4aac170617bf2d9fe76bba3c4ea0c71610c6f3a5048b5c2ade Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2023/06/13 2:59 a.m.5 views

MAL-2023-594 Malicious code in migrate-branch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17f00afb76676c4aac170617bf2d9fe76bba3c4ea0c71610c6f3a5048b5c2ade Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
CNNVD
CNNVD
added 2023/06/13 12:0 a.m.3 views

HP PC 安全漏洞

HP PC is a computer product of Hewlett-Packard HP, an American company. A security vulnerability exists in the HP PC BIOS. An attacker could exploit the vulnerability to execute arbitrary code, privilege escalation, denial of service, and information disclosure...

7.8CVSS7.7AI score0.00138EPSS
Exploits0References2
OSV
OSV
added 2023/06/12 7:15 p.m.2 views

CVE-2022-27541

Potential Time-of-Check to Time-of Use TOCTOU vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure...

7.8CVSS5.9AI score0.00138EPSS
Exploits0References1
OSV
OSV
added 2023/06/12 7:15 p.m.2 views

CVE-2022-27539

Potential Time-of-Check to Time-of Use TOCTOU vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure...

7.8CVSS5.9AI score0.00138EPSS
Exploits0References1
OSV
OSV
added 2023/06/06 11:20 p.m.7 views

MAL-2023-115 Malicious code in auto-protect-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce2d4f4ce708f013cfeabba33b4df8e07fb9c580ae7b96f3dfc9d1960a011a7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/06/06 6:45 a.m.3 views

Malicious code in fc-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a94b568ae69bdc27fd6f57fbb8cb60fde1777793150449ba9cb6895756e03a6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/06/06 6:45 a.m.3 views

Malicious code in fc-session-state (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce915f34780e87423580299a1d37897334a16ce4f4031b78bcf4c630cab69513 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/06/06 6:45 a.m.3 views

Malicious code in fc-collabsible (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7cf2a1c7cafc2f63b3b6da7c03ad9e5bb35508693b37096982b17e947379aaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/06/06 6:45 a.m.4 views

Malicious code in fc-crs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5a07aa52759bb73b117994269f606ebbcc2d9f4a99e9ac891447bf2652e21cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/06/06 6:45 a.m.4 views

Malicious code in fc-fatca (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 737a20c9f6dbe7f64964338a685eb15657c970610dcec176f17c6340af3c6f12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2023/06/06 6:45 a.m.12 views

MAL-2023-335 Malicious code in fc-collabsible (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7cf2a1c7cafc2f63b3b6da7c03ad9e5bb35508693b37096982b17e947379aaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/06/06 6:45 a.m.4 views

Malicious code in multivariate-experiments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43ad874c630ddc5086d622b1f450560f76c8b2d874591884b3265450f0aad747 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2023/06/06 6:45 a.m.7 views

MAL-2023-458 Malicious code in fp-aanvragen-bankrekening (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38ed4291c003da2321057839f26e6889760e131941a98a54026033c0c67fdfcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/05/25 11:2 p.m.3 views

Malicious code in vpro-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7799537e27ebbb40c248b3be22aca53aaf7d03bb8caacec55ff74194ee411a66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References2
OSV
OSV
added 2023/05/15 4:31 a.m.8 views

MAL-2023-509 Malicious code in http-resources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db39987d6a5793a748c90045d86f1464d80c1542227b575b2e57e78fc95a1ee1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/05/13 12:0 a.m.3 views

Malicious code in flying_pusher (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9091b084b192777c6cbacc1b67d67b879e2cdceda2b68082e975394f648cac68 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

7.1AI score
Exploits0References2
OSV
OSV
added 2023/05/12 12:0 a.m.15 views

MAL-2023-975 Malicious code in xml2yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ede33f285ce592232ffffd5ea89eb8505d88e0d520640d52c721560d06d02f69 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

7AI score
Exploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/05/11 7:1 a.m.4 views

Malicious code in zalando-tech-radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93bcc871674553b866c3bc29c32b5fab13985f16987aab59fd1869d00d6b1359 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
Rows per page
Query Builder