MAL-2022-2237 Malicious code in crk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c8faee19e31b2b8f674e006fb2466339f6f0529fdb5296ba70effa34d39e683 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babelpsetreactapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2610f0b7a47fce7dd3dd76cdc90e9bb3725d6c4a99ec4c499d222787d831efaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in comnader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05edfae7962125e7875be9674786069e6f0a06221445baace33167447f655c56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hexie-encode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d480e2cc2e535605e7caaa7981e20f5ee3d64e5a0629c5196070869acc7e5a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mxuaubyyc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bc5d76d1ee0309321a96e4d619dded11684cc26cd16109ae8163bb183c24c70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @7tv/playback-signature (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a90453bb6afe0a129bd8f7c4376d2efd10af9aef8302340ce34e7b6ec4c4819d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in formrocket.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3928f33a4747f885c365e95d9ce9e701ec37af1aa5c5f992366367011a915044 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test6a1i4los (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ebec36ef5f9dc00e22f37d74fcef82606ac1ca32a7bacc2248d6aa6197428d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dedicated-servers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35c4b788f6715525b4725cb43dfd6d9a25dc72435296cd802ed01fcb0ff2d968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in www.uniswap.org (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06666eea24c6cbc300ef7159f1e747181b46f1f6d3bfa5ef7080385a97ec1dc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in notion-intl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8151dcd2427ad2cb147e1aed75dfec8b60d389c600877207d0092c09139d0942 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lido-dao-test-dp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b3cda81343e26318448ae8ce053a04b74276f2e99a2af6cdb288720e87fa6e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in suspicious-react-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b72ddb83c9fbe20fe07636b0a5aedb1c5f788d74050f6027f090bce10b2ab48b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tss-marketing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3ed525a62f5615fed9599256a3276bc2a7471fbf1248bc53288321fba1968a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in connect_softbank_interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f187a923be989830e488c7a61c4c42d36d9ec33482aaf7fd9403f9de8df7c49f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in whatsapp-landing-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6dfeb2e9b7018dd0e4d3c0b412ca067d8db34afd80fe1974702b9c96969b842 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gadgetstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af62b1a5fde86bde8db987e13fb4a174806d4481c18eef3482688bd8cb263d19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deere-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7639528a422b1d6b2bba5f74b3643c55589cca94af8c73d8f98784f97b827c9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-2400

External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0...

CVE-2022-2400

CVE-2022-2400 affects php-dompdf prior to 2.0.0, with Debian/Ubuntu advisories (DLA-4427-1, USN-6277-1/2) documenting a vulnerability where external control of the file name/path could bypass access checks. Debian 11 fix: upgrade to 0.6.2+dfsg-3.1+deb11u1; Ubuntu advisories reference correspondin...