MAL-2024-7129 Malicious code in @zitterorg/aut-fugit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97a9ca54db44e97b047436fd35587dbeab1f9cfc0955a5aad6c0c1c08b299738 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/minus-impedit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa89a91c8e49e49869ff169a118201f0acf9afd5f4af358abd95a9486378aa9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/praesentium-ullam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6d744af54053ae1abf2c7716819ee7b15e627012edea83b3ab84ffe5839e71b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/aspernatur-qui-recusandae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 463c3340e3e6bb24c0da1c1a92edb0425b31adafbd4d36090a0e33749ef7256d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/ipsa-in-aliquam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e2c950c055c3600bbde106ca6a000af720468b2170004bf7741bb4d96e9ec64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/dolorum-cum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 503b16b5690e5bb3aadf1675d08d5a8fed3b302fa14ff95b2159f97571453ce8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/fugiat-odio-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 688d1b51f8a09d7cf59c5c32e5f762654108a0693d403dcf99445ddfe7dffa37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7200 Malicious code in @zitterorg/esse-quo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d19536d16e5140c179436239b74e66a32ca942db9fde40a93e8e18f75922d6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/ipsam-magnam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8d6c8a73641ea7e6861ce8fb3b8cb08f9293f3c9cf1a9694939d7018451a3cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/doloremque-ut-omnis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87649c2bafbfc6fe3757a286f5aac02e9f7bd728211143dab45a3dbd03227e65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/id-est (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a6fc1d2f504dcec1bc8d3e32373be117bb92bafe3d63417b9b1aa5b3da18f9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7215 Malicious code in @zitterorg/fugit-odit-fugiat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0aac1efba4a0cd6714c50de7989f3e1da7329d3358e0172881655617f86b3d93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-54259

Name of the Vulnerable Software and Affected Versions Ksenia Security Lares 4.0 Home Automation version 1.6 Description Ksenia Security Lares 4.0 Home Automation version 1.6 has a default credentials issue that allows unauthorized access to administrative functions. Successful exploitation grants...

Malicious code in check-credit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eeaf8d20bbaa95c39cf1458d9aa8469006eee9ab9ef2202bdaf1757873c80468 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vio-captcha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e0d4ea8565e04756dcba1d4c9911caedecb38b6cc8717f68ee679883d19cb2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-5181

A command injection vulnerability exists in the mudler/localai version 2.14.0. The vulnerability arises from the application's handling of the backend parameter in the configuration file, which is used in the name of the initialized process. An attacker can exploit this vulnerability by...

CVE-2024-5181

CVE-2024-5181 – mudler/localai (v2.14.0) : A command injection flaw arises from how the backend parameter in the configuration file is used to name the initialized process, enabling an attacker to manipulate the path of the vulnerable binary and execute arbitrary code. The issue stems from improp...

Malicious code in ufo-rocks2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3374b9d8ce913176fed7916c9adf5e5239b09aed801473ef2363bdf190f1c8f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in signingroom-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d3bb2b5cbc3013e79bdf785188fcc2460f21c6214fa59d6a57b5e3d8ed15b3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-5559

CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists that could cause denial of service, device reboot, or an attacker gaining full control of the relay when a specially crafted reset token is entered into the front panel of the device...