Malicious code in @zitterorg/deserunt-beatae-fuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9102b6b1b9c0603fe9968c593b5a7500377a6ac0843e6595dc438c9b75e213f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/quaerat-error-quae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f525a609435b8cebf1609e5a16c891a4871ee14198a6919a555f77b1e97eb69f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/animi-accusantium-similique (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 100fa60694d9ac8f03f0dcc1cac9044043e7fb0dbbcab101b30f4ebf85d71838 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/voluptate-voluptatem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e718722e8e73b8ced7497c847803cca0705fd12a42c13e225c61cc747591cbd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/pariatur-ad (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d63da05fee628a513211a2d9871e5b4726d7ef0ac3e3b941db2f8ed8f401f1d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/blanditiis-esse-iusto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b85679f63de09f240f63d1340cbf5d3ba5e4733c1fa372cc72080657d1a942e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/sit-vel-delectus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54bfa38d2b63aa8984c09de50f43e8a7e6edd21efa7ea6ba17bc4f63a7b4ab69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/necessitatibus-doloremque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c0803a4b115a9b061b0db3dfcb73d5f1ba45f307109244f53e1ece0f871b8ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/dolor-placeat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 494a398b18388d83f53d02167dec99bbbd3f40b05a9b4d9bb336bd3f6bd86b70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7166 Malicious code in @zitterorg/dolor-placeat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 494a398b18388d83f53d02167dec99bbbd3f40b05a9b4d9bb336bd3f6bd86b70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/quidem-et (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eba297499f95908de2b65999b0774985eda5d48ff2f4eaf0a6f6b3c4404b33d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

New Open SSH Vulnerability

Its a serious one: The vulnerability, which is a signal handler race condition in OpenSSHs server sshd, allows unauthenticated remote code execution RCE as root on glibc-based Linux systems; that presents a significant security risk. This race condition affects sshd in its default configuration. ...

CVE-2024-5181 Command Injection in mudler/localai

A command injection vulnerability exists in the mudler/localai version 2.14.0. The vulnerability arises from the application's handling of the backend parameter in the configuration file, which is used in the name of the initialized process. An attacker can exploit this vulnerability by...

Malicious code in starter-assets-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba07492e2a8db9d81d2c52ee32e66ed5f4432091392b4e957b6974329bce90d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in govgen-governance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3df1a5ba7e5302cde15d6c6ab8220b80b3dd7d291cbdab4f06cac278dacf77de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in braintree-rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 317e40dddb16cb1cb057d35c6fecd763482fcff6009f8fb06386f4b526cb3b10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-4889

CVE-2024-4889 affects berriai/litellm 1.34.6. The issue stems from unvalidated input in the secret management system’s eval function. When Google KMS is configured, an attacker can set UI_LOGO_PATH to a remote server in get_image, allowing writes to a malicious Google KMS configuration file at ca...

Malicious code in command-injection-avi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e54fd75c755589d5d22d320040508b52efe2fbce858fb0d335c391c2de86df60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/velit-incidunt-beatae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cfb6158311aa917e04e4fd1480bce5fa2373ec233fa949227dcec5307125c62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/repellendus-temporibus-quaerat-nemo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ccd454210a271a6f5c11fd814e15c9b2fca8c193797cb78adabd42110a4bf1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...