MAL-2022-1540 Malicious code in bfx-hf-func-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7631340a32bc76c05bd236bc6011f4f1040460a40997bbec6fe11016748b4029 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in threatresponse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c55f07ff7cae84dd3c5283ab53dafe8a9657a3f167f6188d85c5361f7b26a262 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2826 Malicious code in eslint-plugin-seller-ui-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a2a70b6c59d84f180c6375345e6df311615b32f69cd6d6da58fd50cc54a12ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bolt-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40639c5f8b34134db966654cf56e02dd69cd250d3a0d8873dba524ac9c75ae7b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lbc-git (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d5e0e36aba3e23f480664cd7bebdb71156e08493ca3b9ff660474fdf2068b84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in api-extractor-test-01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d2e8ca531ea558490f3d56526d4d34d2a7e331a33a10d94cfd75f8eff65807e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-infra/app-lookup-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bbe84e4aa37a9b2484d307db5f4e3ac6dc202acbd2d528d2949bd1c1ce0e43c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-236 Malicious code in @epc-infra/app-lookup-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bbe84e4aa37a9b2484d307db5f4e3ac6dc202acbd2d528d2949bd1c1ce0e43c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-libraries/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 513bf18f392186904a1d77dd47476bde881e1a8f377dc070998c5d1625e72b7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-233 Malicious code in @epc-apps/api-management-plan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcba229feeeaecf4b840caf01dc046b860329625fbae49197bcdbb35289561d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-241 Malicious code in @epc-infra/region-only-policy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03aeca5ad9dc6bebb0249d07c948fc2913ba7b25fdc41cea4a5c78c8bf672958 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-242 Malicious code in @epc-infra/stack-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d37356aab514ee977ba45a8e6b7004158d85893c2f6d5544314656f41789348b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gulp-browserify-thin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ef843cda125c2cda337af64084a57a7a79a488e977a9ec4ca912704ab2059c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dummy-preprocessor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4908ea8244b5d2d0dad36068c074f34b17b6302ce6108fc1526b398a21613794 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2100 Malicious code in com.unity.probuilder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b512f06ed3c61432a9aeb21614cf1cbfdf19bbb3d697a4cf04c999f82b71d1f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6234 Malicious code in speedy-ts-compiler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e169a7981c2abffdf7307332d399464dd770067c107f40e8a7c7b6c62fe06e3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in personal-colorss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b457f778b7d2d5419ef9ed84f7ae14c68c3bea5b4980afdfa74f782c9fde7fb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-22162

A Generation of Error Message Containing Sensitive Information vulnerability in the CLI of Juniper Networks Junos OS allows a locally authenticated attacker with low privileges to elevate these to the level of any other user logged in via J-Web at this time, potential leading to a full compromise...

Kubernetes: elections.k8s.io uses weak session secret key, may place elections at risk

The elections.k8s.io application used a weak Flask SECRETKEY, the string "N/A", to sign authentication cookies. This allowed the complete compromise of the application, as the session could be manipulated...

CVE-2021-22978

On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all 12.1.x and 11.6.x versions, undisclosed endpoints in iControl REST allow for a reflected XSS attack, which could lead to a complete compromise of BIG-IP if the victim user is...