Malicious code in com.unity.2d.animation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc9471b1667f7a99781cd6eb6b2981af2cb2d997202877c74068e9c501e52019 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in formio-tenant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c6b64a8b6a6d607401323c18ac8fb343218bcc9a2484cf780dcd896b39d438b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secureshield4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f23bae727a469f26985689c3f9d59601b7bfd53e52b3cf2b271a56941e37af5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in synapse-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f22e2f65543683192030203ce08eecf0c137c3bc94f711cf9dd5c143dd1bd19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tfjs-backend-cpu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ab996031ea5c2f352b36f8fe674a3567caea43a481c8484f1612f5b80317b57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in falcor-express-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41a16c5f789993af6f19fffb815a56c859feacab1a40cb4b54ab9eb3ea92afef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-49424

CVE-2022-49424 is a Linux kernel issue in the Mediatek IOMMU driver. The root cause is a NULL pointer dereference when printing dev_name due to larbdev being NULL during probe (mtk_iommu_probe_device). The crash can occur in device_link_add() and is triggered by an incorrect DTS input. The public...

CVE-2022-49141 net: dsa: felix: fix possible NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: net: dsa: felix: fix possible NULL pointer dereference As the possible failure of the allocation, kzalloc may return NULL pointer. Therefore, it should be better to check the 'sgi' in order to prevent the dereference of NULL...

Malicious code in pinot-controller-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83ea1a5f03364deddf9525a13146b4cf1bece3baf1ce56a10c1ea5e424f6aeb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in upm-ci-utils-tes-t (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3db67af7201afa722ce928a46979afb3ac375ebe370e32d0578fd2cca9119bc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in unmoderated (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70f2bf868d2780e6b4d8a00b1e6f3c4385994e32d71be80b2efd5d4636bbc0da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sysaid-infra-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32067df7060881cbe716c03dd7dc8c3b443263f314412e89e99a435622227b1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ascendex-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7d0c8803a00a9ae99435e647d34560b1abbd7f2916cf052fe47e842e7b6a407 Any computer that has this package install...

PostgreSQL -- PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

The PostgreSQL Project reports: Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral, PQescapeIdentifier, PQescapeString, and PQescapeStringConn allows a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: mm/vmalloc: fixed vmalloc, which may return null if called with GFPNOFAIL. The commit a421ef303008 "mm: allow !GFPKERNEL allocations for kvmalloc" includes support for GFPNOFAIL, but it creates a conflict with the commit...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: lib/testhmm.c: Handling of failures in allocating srcpfns and dstpfns The kcalloc function used in dmirrordeviceevictchunk will return null if the physical memory runs out. As a result, if srcpfns or dstpfns is dereferenced, a...

Malicious code in internallib_v185 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8939bc2acda7e18713b6ff48ec41b70f18201a851beeabecd0e544cfe80430c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-10125

The Amazon.ApplicationLoadBalancer.Identity.AspNetCore repo https://github.com/awslabs/aws-alb-identity-aspnetcorevalidatetokensignature contains Middleware that can be used in conjunction with the Application Load Balancer ALB OpenId Connect integration and can be used in any ASP.NET...

Malicious code in example-advanced (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe22841f48a20657900f7b7c76268c6243981bb55e440bc22345c6b8831d42f6 Any computer that has this package installed or running should be considered...

Malicious code in type-on-strap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb7c3c0201aafc369ec9ca67cd6610fafdf472d7be2ea007f687c0cdc3e9e62f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...