Malicious code in bundle-cryp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68e5e93c567878bc6b19bc6773caab5b8bb228ebe198a31386e7131754aeb937 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005568 fixes several issues. The following security issues were fixed: CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans bsc1233712. CVE-2022-48956: ipv6: avoid use-after-free in ip6fragment bsc1232637...

GHSA-VGF2-GVX8-XWC3 Vyper Does Not Check the Success of Certain Precompile Calls

Summary When the Vyper Compiler uses the precompiles EcRecover 0x1 and Identity 0x4, the success flag of the call is not checked. As a consequence an attacker can provide a specific amount of gas to make these calls fail but let the overall execution continue. Then the execution result can be...

Malicious code in zqdl0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce9bbe7fd04262b93d13b5234f5edf4d193e5bdb7251a7a51583e670c69af049 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zqdl55513 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a623c3e69f707a5c5284a6e298d4d5149c282064e65985928f1277cd258d87d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2024-53198

In the Linux kernel, the following vulnerability has been resolved: xen: Fix the issue of resource not being properly released in xenbusdevprobe This patch fixes an issue in the function xenbusdevprobe. In the xenbusdevprobe function, within the if err branch at line 313, the program incorrectly...

Malicious code in chaos-mesh-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf6095ca937663ecb8415c2b4660d18c29a20c3e17180bfc24555ac11284a784 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in healenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab4597abf70195617218b4366cc4e83ea35770e784027c1909b352f258da5b8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uflexreward-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57620816e143ff2658a9323cbf5e516cacf63db55bbe14fecdabeafd68bf1d8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in client-cloud-phone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f1ae3b18921b79d7beb07afcdddc3fbc53fecdee3c647fcabe847b93220d0d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in upgrade-solara (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06786e0684a9afc602c99f62a977e170fc435947a63896cfd50abc00997f7b63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in container-toolkit-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 495f1eeee43fdcdf2a5b5468befc8209a0d5d55f315464d80a9ae3d926a34da7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in less-rhino (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e73bfd1ed2aa0b8489fb39ddfc1ac2272730be0a23c877efe7ac2042216feb49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pantheon-documentation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4da7ba157a9ffb95066f9d905650ba20227c83563a445aa30218a7eb1efa4e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in all-dl-404 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c81b14656d59125b0a646d87c4351c27ca359a39cbc729ea08ba8ebc5a7e314 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in evermade-bare-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0b99357d9a7ebb58236fd8dbbe61d922cbc65f219d0bf1c7ce4ab17778ed198 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in distdiscord-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df4e3ffa3125383f7eefd22447c1d5f54c29993ca1aa53c9fa243ddd464e0c69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in agoda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8556377fff6ad9dfc3bb12eac1be9583621abe348598c4a9a835c3103eb76089 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in linencloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 999ba2244ac8c4672c2eb7c235f23d6b1274cb293a3a8596b0f4d98670459dbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in repository-dispatch1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f9656fdbcf8cfe7b8793ea8ca6e482acdd0cd50039d7b14f2e00924b3b2d0e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...