CVE-2022-27539

Potential Time-of-Check to Time-of Use TOCTOU vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure...

CVE-2022-27541

Potential Time-of-Check to Time-of Use TOCTOU vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure...

MAL-2023-115 Malicious code in auto-protect-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce2d4f4ce708f013cfeabba33b4df8e07fb9c580ae7b96f3dfc9d1960a011a7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-session-state (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce915f34780e87423580299a1d37897334a16ce4f4031b78bcf4c630cab69513 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a94b568ae69bdc27fd6f57fbb8cb60fde1777793150449ba9cb6895756e03a6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-crs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5a07aa52759bb73b117994269f606ebbcc2d9f4a99e9ac891447bf2652e21cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-335 Malicious code in fc-collabsible (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7cf2a1c7cafc2f63b3b6da7c03ad9e5bb35508693b37096982b17e947379aaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-collabsible (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7cf2a1c7cafc2f63b3b6da7c03ad9e5bb35508693b37096982b17e947379aaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-fatca (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 737a20c9f6dbe7f64964338a685eb15657c970610dcec176f17c6340af3c6f12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in multivariate-experiments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43ad874c630ddc5086d622b1f450560f76c8b2d874591884b3265450f0aad747 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-458 Malicious code in fp-aanvragen-bankrekening (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38ed4291c003da2321057839f26e6889760e131941a98a54026033c0c67fdfcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vpro-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7799537e27ebbb40c248b3be22aca53aaf7d03bb8caacec55ff74194ee411a66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-509 Malicious code in http-resources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db39987d6a5793a748c90045d86f1464d80c1542227b575b2e57e78fc95a1ee1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flying_pusher (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9091b084b192777c6cbacc1b67d67b879e2cdceda2b68082e975394f648cac68 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

MAL-2023-975 Malicious code in xml2yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ede33f285ce592232ffffd5ea89eb8505d88e0d520640d52c721560d06d02f69 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

Malicious code in zalando-tech-radar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93bcc871674553b866c3bc29c32b5fab13985f16987aab59fd1869d00d6b1359 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in homo-deus-a-brief-history-of-tomorrow-by-yuval-noah-harari-on-audible-new-version- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7113f20e74d21a481eb7e3c7305184685724e0e05de2bbbcb9ce76e2df4fdb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in born-to-win-find-your-success-by-zig-ziglar-on-iphone-new-version- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2310dcf104d337b53aa70287812ce0bdc9c1ab5d0f2f198c79a3ac4566a20da7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in beautiful-tempest-malory-anderson-family-12-by-johanna-lindsey-on-iphone-new-format- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7faa105f44cbe37ad6640900de81ba2fd9b8d8a89555a095bee8fc30a934e3a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dow-load-the-viscount-who-loved-me-bridgertons-2-by-julia-quinn-on-textbook-full-version- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cb988658f2f56da926a1098d170afd2e1e17a12e9e03a418ba6022f093149d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...