1275 matches found
Malicious code in git-en-boite-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2a28164e7297d1f76fb0f0a2321f9be542603117591c9d910bd5edb6b7add66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in dontbelikethat (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e8c2151966c8c4c21eb736b2dfc07f3b533a0247a212350a6a21936e3d313f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in topicmodeling (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58368b384698175b4023e096d423a5a8c3a22d4dbb8651b2b4c9ad74c19d3161 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @octopus-ng/fetlife-assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fee52bacbc657019ec4ae08930cbee6cc9bf5647fa4bb391956c63a738f9679 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @mozilla-mobile/fetlife-assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0f81ce8fcc04e7269be2b94ee6aa1ea2abdbd3f4c8e6286e9c2db240e307ca4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @glencore/fetlife-assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c24fb3cfba1edf0992ba23c73a07778f089ee7b9ca09d85fa0c22155971af47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @espn/fetlife-assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c01b035156efe98723a341a81abfefda64ddf596c8456ae829ca3371eed8ba9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @berkshirehathaway/fetlife-assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 143c4c0f434892a6350625a31d779bb66c69a52f1cdd6659197b38d87861e8ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in rlms (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2335caf4ec81ea00b6da46ec70fa9da3bd1887c3d87dd1fc24a9466f45f98e0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in helix-slack-notification (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9520877ee689f4ae7ba25d861168d154264a54e831d5496ceb94a7e46fa8a365 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in minis-samples (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c077b52bdf5ba9829bbb40e34b43aca9f4191c5c87ac682e35e3d0f758763777 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in atomic-angular (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a312917055a535347fc34c0b8dd11c2a947d7fa9fbfd5972cdfe7fac5d4f981d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-33175
Power Distribution Units (Powertek firmware) prior to 3.30.30 are affected. The vulnerability arises from an insecure permissions setting on the user.token field, exposed via the /cgi/get_param.cgi HTTP API, allowing disclosure of active administrator session IDs. This can enable session hijackin...
Malicious code in @spinak/iac-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77099501462f80e29fcba9337b4c51a78859cfed8347211f50acbafee737a3ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @manomano-toolbox/pim-management (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd08f90f97f53d7b76dad3a2a10ed8031f6af87a735ea7bfeb12bc0290aefb4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in tangerine-state-viewer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83cabb2630e510d0c9b63f6c164c5825dd5325a370fd8db846ead2bb3ed782a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Qualcomm 芯片输入验证错误漏洞
A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits including primarily semiconductor devices, but also passive components, etc. and is manufactured from time to time on the surface of semiconductor wafers. An input validation error vulnerability exists in...
Malicious code in @chegg-me-components/header (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2243153078c6242a8399b5c02c6012c19cdec162fba625367192ec6b96affcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @superbet-group/testsandbox (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3c841d01eabde154bcbc04ef8e906e2a21f4ca241cae38408ca9748e5087c01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in gc-gsl-editor (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a4adc0fa0f46c847c26f536f6d3390e092f77b6f9a533eaab32b95b5cf83499 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...