Malicious code in matic-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f86c86d3e42f1a874421dd446c136e620e387b8672356395e507a8517fd2b1e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in share-service-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 573a919a5f99a385c49e135f43877bdf5ce7d34922b04e65a44fea212284a3a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in purple_team_midway_2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1090576e788b78404457c1ebcc9bdc3ad31cd07bafd6331cda384ea540e1ef8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kubernetes-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32f0bf218a305dbf3c1cd86e6ea417e2c3c43aed723d3054398bc8efa8506553 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in orion-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8aa15eb66151939e86100689fb757fc16fe120517dedab8aaa1b62b61faf5ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in beachlean (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12a6be41fd08f19b11d84b29167f2b2d5c53b49a93820e0a11319ae7f1d34331 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-27774

An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTPS redirects is used with authentication could leak credentials to other services that exist on different protocols ...

DEBIAN-CVE-2022-27774

An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTPS redirects is used with authentication could leak credentials to other services that exist on different protocols ...

Malicious code in @adam_baldwin/tag-tmp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f211f37484306b90ab81d936a2241de4d32e3b4250fb10a75c72425ff75585aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4511 Malicious code in mb-blog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 658aa7eb483cfd352b2c2c628d938ac8566bbf7cbb32d0e806867d1abcc8ae24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in brlc-token (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d7212ac759445a19263a1bc31ab713414359f0ce212665d53b2b150651a7b34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nginxconfig.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 400e870471def5cb533f443425f9af880d3f5df7783baba1b0ea3f8b22343abc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vor-test-project-npm-please-ignore-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76b54e7d6e1b94a5892077c4de0ac61f32b1433a136e49363c4be9d886e76c7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in whjr-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9dce9c9aaa9e383fef4277d3ac40c8e55558803e648049e419c0f3370b4cec1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-31796

libjpeg 1.63 has a heap-based buffer over-read in HierarchicalBitmapRequester::FetchRegion in hierarchicalbitmaprequester.cpp because the MCU size can be different between allocation and use...

Supersedence Data Builder

Collects and stores supersedence patch data for various patch types. TRUSTED...

The vulnerability of the cURL command-line utility lies in the insufficient protection of registration data, allowing an attacker to gain unauthorized access to the protected information.

The vulnerability of the cURL command-line utility is related to a data leak or a leak of cookie headers during HTTP redirection to the same host, but with a different port number. Exploiting this vulnerability allows an attacker to mistakenly send the same set of headers to hosts that are...

USN-4961-2 python-pip vulnerability

USN-4961-1 fixed a vulnerability in pip. This update provides the corresponding updates for Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. Original advisory details: It was discovered that pip incorrectly handled unicode separators in git references. A remote attacker could possibly use...

Malicious code in @seller-ui/settings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4674644c2014b06237b7b57625ef3df259e929582417222203faa014af763046 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gfg-security-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09b1baa087e5a15e5191847e961ff42d2590015816e2d532ceb01dbbe5c65264 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...