Malicious code in playwright-1.48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c425d60dd5426771b56cc598b6cb55fffa7b0444728b06e2d6126389582b0707 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in otc-echo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b0e38efe6cfc6243284d736f8569dc30c9f94b10388d60d4f0f323fbb84cf5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mockapie (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c6ab6842511adb800a707783d5712c9ef0fab67ae37078975c9a8580aa6121f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 32red-database (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61467e40b369ce42bb9addcd5f11f62f444c0a9cf8e30253f0d5ca79697c68a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 000webhost-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25d9c93cb4354fefa9f9ef0acacce38de1f8fdf87f67ae7c3e2fbe2cb746c9e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in imran-servar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9af64e8c6963a1d384ffab6087780576331442e9e8c79eda2f18e092b02b52d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nayan-imgur-upload-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b98ebdb98b3110329cb9db3c496ef6fa0d0f21bcf8ec8302746d6f47b0cf884 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PDQ Deploy allows reuse of deleted credentials that can compromise a device and facilitate lateral movement

Overview PDQ Deploy is a service intended for usage by system administrators for the deployment of software or updates to targeted machines within their network. PDQ Deploy uses "run modes" to deploy software to their target devices. The run mode "Deploy User" insecurely creates credentials on th...

Malicious code in core-registry-dashboardx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3be3f25a63079c3df9415707b51a81889281c32a64b2e9e3d28823d5e869e508 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.entities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 704bb1e215446716b288a6ff073ec571aaa17118a226fc27d65925981a74b53b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in adminconsole (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88480db379ccb5378aada30388162f00d8033acb86b62e8d2e490533646c4a4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-10772

Since the firmware update is not validated, an attacker can install modified firmware on the device. This has a high impact on the availabilty, integrity and confidentiality up to the complete compromise of the device...

CVE-2024-10772

The CVE-2024-10772 entry describes a firmware-update integrity issue in SICK InspectorP61x and InspectorP62x (and related TiM3xx families). The root cause is unvalidated firmware updates that allow an attacker to install modified firmware on the device, potentially compromising confidentiality, i...

PT-2024-16532 · Device · Device

Name of the Vulnerable Software and Affected Versions: Device affected versions not specified Description: The issue arises from unvalidated firmware updates, allowing an attacker to install modified firmware on the device. This has a significant impact on availability, integrity, and...

Malicious code in pantheon-documentation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4da7ba157a9ffb95066f9d905650ba20227c83563a445aa30218a7eb1efa4e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @solana/web3.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 507e136eb7d13bd9c88a5e20d692768a759c2ae382d1ab54ba66c196b560cacb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in newbharatv3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74b5f56622d0644e0c4c3e00b45ba35dbf91e1180da7c65e80145bfe0051bf40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in transify-helper-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fe9a95aa86c804ea93c96457c3f8ef18a9415c888ae5921213386c8424038ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fe-prometheus-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 985893f86a88110b578b46b480afeeea3cece69b7d81e7ce6c54a5bb36d54ed7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hacker_for_pastebin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b86d3e7dd7e4513b7ffc80616aa25c0330b91d9af1cedcb8e8943ed7b12e364c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...