Malicious code in tribe-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f57ccab2b6922f348a06b232b88fa98776092f0312a0b7e9e702eacc47ac7ab8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @fbpay/test-container-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be165585af795e998045a4ce8119ba5451800d231888d8391d97d62176cf6301 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sbb-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a33d562d292f4f9490f63efcfa905adb29084516d148a57d0052a57feb01582 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dyson-careers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45354e686a81be1f7beae30cfe56f02066a59381c71e9bde6018e12f960b1b89 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ali-react-table-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53d15b71d930254298ce564c3c5716d26e3b0f5d81ccbf3169d560b8566a988e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in feat-xsm-st-conflict-using-sheet-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4980cf19bfc7f78bd38baf67a9da323ef5e14a0d067a4d0eb3188a990b15c9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-selfbot-aployscript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc93e9f85282fa6c215cae6985e915c94ac7255aa52f9013ead4e68ced102f40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oas-nodegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78561c53bb14bcf6f3810ec4104bb7d96535fd3f7e9491f5eadc9690483c6ea2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in git-en-boite-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4f46bbf079b977deefeb78d8bf3c63587df8e512096be79aa8e7decc4c95083 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in clientlib-manifests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd95d1421f86a0fcb7e8d34b789963cd69846de212094ab2d1a0fe0468408554 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in v3-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45439087657c838afe562f7ee8545fd01977fd0ee167e284431a7a0025cfa62a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in on-running-script-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b99286f337b376ff84ea4a7b5c1e6c0a8edaef278aecf26b1543bc9d05212b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in even-more-externals (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87d88bdc74cdae01727c6412359657971e95af66b3580bb8c50c0a28540f34de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6550 Malicious code in theremontada12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f57f9f39528199f4988a41ac4bc6d51f57e7e50bc7eb77f9858b3ceebf0516fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

...

DEBIAN-CVE-2022-23773

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags...

CVE-2022-22722

A CWE-798: Use of Hard-coded Credentials vulnerability exists that could result in information disclosure. If an attacker were to obtain the SSH cryptographic key for the device and take active control of the local operational network connected to the product they could potentially observe and...

CVE-2021-22272

The vulnerability origins in the commissioning process where an attacker of the ControlTouch can enter a serial number in a specific way to transfer the device virtually into her/his my.busch-jaeger.de or mybuildings.abb.com profile. A successful attacker can observe and control a ControlTouch...

CVE-2021-27943

The pairing procedure used by the Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs and mobile application is vulnerable to a brute-force attack against only 10000 possibilities, allowing a threat actor to forcefully pair the device, leading to remote control of the TV settings and...

Command Execution Vulnerability in EyouCms (CNVD-2021-41520)

EyouCms is based on the TP5.0 framework for the core development of free open source enterprise content management system, focusing on enterprise station user needs, providing a large number of templates in various industries, reducing the construction of small and medium-sized enterprises, netwo...