Malicious code in npmrunnall (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02e76869051760cad21e27046ef3eaf4df72e1188ba6eb04573327b86a2fee49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in debugr1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d8da47712ca04d79a2bec26869c777f7581be1aeb31aeacf3d22c37fdc27ce6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cs-shared-component-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b7b8d8fe1019a5e94c13232a7501bb7dc77b9f34c4b2c02354edfc3ab84d27f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-chat-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e1410c02449b7f9317f68317b69ec23e5601c189018c375ccdcb1d453def943 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-10524

A flaw was found in the Wget package. Wget might issue an FTP request to a different host in configurations where the HTTP shorthand format is used with user-provided input. An attacker may be able to use specially crafted input to cause Wget to access an arbitrary host...

Malicious code in promotion-banner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb9a77d5820e57e492fd4a0d3edaac6b239670f384d4cee56d88007f9550184b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in h20-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72f919b25a0e7333704e4c71c06150db40d66dfbb43786f6fece3fa6b1055141 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10700 Malicious code in h20-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72f919b25a0e7333704e4c71c06150db40d66dfbb43786f6fece3fa6b1055141 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in graphql-yga (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f47f947ce34d135841426d54dbd431fafee589316d101ac561f402d69ff75316 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in byted-service-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99c7cbdcd79d3751d34a430b7fec43a8393a2facc81155373a2e914f3d8f39ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eth-cmeta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e390d3f621f6795cefcac7ff48cd9734854f2734360b55599683db6ece8b468d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lessc-rhino (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b2f2e650cb07c9f3679ece96f6b976f18f9a931750b93c824d3701667ab33bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-66C4-2G2V-54QW Grafana org admin can delete pending invites in different org

Organization admins can delete pending invites created in an organization they are not part of...

Malicious code in kbc-ui.templates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware feade461c80f0216eb60fb0512a4b248d287ed5f597c2270242a8cd5d93a8888 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tds-styled-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6fd1f1a79e054904c1996f83eaebf071439a273c6c1eb478e4f6c2fed1a2b58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-10353

A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file /admin-dashboard. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the...

Malicious code in zxlaq2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5566b4e9fb56b0cb1ff3a034544d7a6422b5414a732484404a275f5b2cfd232 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in down-load-available-zip-now-365509-chew-the-scenery-ymqd7-xaqqmu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39470e2ad654687e0841bb2740b376632c07ad817ddd755c4037149fb3872220 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in new-al-bum-av-ailable-35600-lived-to-tell-bt7g4-oftaau (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 327dba2f98c7d7cb3d700ac2b74867d1a0e1fc93e5b8c07cd825dc020c6fc4b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gcp-monitor-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8ac49f0f48f0a8f3b5ab417aeeeac247298e9ab4f211f88aadcca93bc624e58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...