Malicious code in solarafix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3903c6aeaa4d35f7f601837d1c232e25462dcc8d210e811feca02652c348e08d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in veworld-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4208104cfdf19567e6147c7cf429ec5ff0e3cda75b01f79cf4ac5b49252ee3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ssc-upload-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f805f8fdf8bbc931902fd9635ef6061d0bfc25743ba0a24a20ee876b6e2c8ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in odin-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88fb389e44efcf715a97b223a3b5d1df5427225000fc86af2138b7bcb3934375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pvct-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97125a9e23577624ce75d1c18f9ef230f8dee8ab03e9122e21afcadedbf22b0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in people-rn-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 681ed628388433ac94a7fae9dc863ce558f90b455be767d11efd4b5f0ad7bd97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mdap-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2463538f2c8446c6a068b5eef41b3088105f8292ea4b22e3cec1066ff3822ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in markomponent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77eccdef0d97ddaef12d7b6d994f078943e26b68cb1dbf79615d0a18035b96ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sazz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d92dbc3fe418eda55594a9daf2e211b0d4595e4d8eaa8559e9c430e20995eed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

kernel: iio: core: fix memleak in iio_device_register_sysfs

In the Linux kernel, the following vulnerability has been resolved: iio: core: fix memleak in iiodeviceregistersysfs When iiodeviceregistersysfsgroup fails, we should free iiodevopaque-chanattrgroup.attrs to prevent potential memleak...

Malicious code in @sportdigi/scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f680e619f440b13e9d346c4482d63b5917ea63581ff977594d0b7244b6a61307 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aav6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5beb686c6b2faf31e0ce26d4b2153f3d2979b61629fcd9916a69074b5628ebd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in code-analysis-ts-for-sellercenter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74562e2ce31e022d691644a9e71592ee149d99d6988a02f47bd35197d549c1f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethgass-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e278f81839ea2e511d9b9d90880271f216f0694163070eb39cba33d0fd3e138 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sc-libraries (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e685150357e5118f6b99d29dcc954b4c5e33389fc7764e15ac72be42fbc1e27a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security update for the Linux Kernel RT (Live Patch 16 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505001358 fixes several issues. The following security issues were fixed: CVE-2021-47598: schcake: do not call cakedestroy from cakeinit bsc1227471. CVE-2023-52752: smb: client: fix use-after-free bug in cifsdebugdataprocshow bsc1225819. CVE-2024-36899:...

Malicious code in selfcord-v14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a55c578ea76b7795bf2336ca5deca359adbfef86c306c5c2a588dd5c59bbe187 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2022-49029

In the Linux kernel, the following vulnerability has been resolved: hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails Smatch report warning as follows: drivers/hwmon/ibmpex.c:509 ibmpexregisterbmc warn: '&data-list' not removed from list If ibmpexfindsensors fails in ibmpexregisterbmc,...

CVE-2024-49954 static_call: Replace pointless WARN_ON() in static_call_module_notify()

In the Linux kernel, the following vulnerability has been resolved: staticcall: Replace pointless WARNON in staticcallmodulenotify staticcallmodulenotify triggers a WARNON, when memory allocation fails in staticcalladdmodule. That's not really justified, because the failure case must be correctly...

Malicious code in elk1yf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 471b28d9ba2a82d14b4dc81f5a18c4cbce414ac60e2f843c8023da9b01b639bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...