Malicious code in @zitterorg/blanditiis-esse-iusto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b85679f63de09f240f63d1340cbf5d3ba5e4733c1fa372cc72080657d1a942e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/sit-vel-delectus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54bfa38d2b63aa8984c09de50f43e8a7e6edd21efa7ea6ba17bc4f63a7b4ab69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/necessitatibus-doloremque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c0803a4b115a9b061b0db3dfcb73d5f1ba45f307109244f53e1ece0f871b8ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/dolor-placeat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 494a398b18388d83f53d02167dec99bbbd3f40b05a9b4d9bb336bd3f6bd86b70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7166 Malicious code in @zitterorg/dolor-placeat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 494a398b18388d83f53d02167dec99bbbd3f40b05a9b4d9bb336bd3f6bd86b70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/quidem-et (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eba297499f95908de2b65999b0774985eda5d48ff2f4eaf0a6f6b3c4404b33d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

New Open SSH Vulnerability

Its a serious one: The vulnerability, which is a signal handler race condition in OpenSSHs server sshd, allows unauthenticated remote code execution RCE as root on glibc-based Linux systems; that presents a significant security risk. This race condition affects sshd in its default configuration. ...

Malicious code in starter-assets-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba07492e2a8db9d81d2c52ee32e66ed5f4432091392b4e957b6974329bce90d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in govgen-governance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3df1a5ba7e5302cde15d6c6ab8220b80b3dd7d291cbdab4f06cac278dacf77de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in braintree-rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 317e40dddb16cb1cb057d35c6fecd763482fcff6009f8fb06386f4b526cb3b10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in command-injection-avi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e54fd75c755589d5d22d320040508b52efe2fbce858fb0d335c391c2de86df60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/velit-incidunt-beatae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cfb6158311aa917e04e4fd1480bce5fa2373ec233fa949227dcec5307125c62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/repellendus-temporibus-quaerat-nemo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ccd454210a271a6f5c11fd814e15c9b2fca8c193797cb78adabd42110a4bf1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/officiis-perferendis-ab-nemo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 711ca6e76bb5bf74420ee6016bb52bb5a3a35528a68961286e6d73de60662243 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @juiggitea/distinctio-tempora-quos-quis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68e117b447f3dec0b0269d05cfea94ff028b4f8d24d17e0d3edf4eb62a9c801e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lamia471 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5b6a082a9defb6d9d2265cf9e9dee0b5e0382c8afda6772a4ee2248d142303d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @lbnqduy11805/silver-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48fa3414b1fc4238faa198d07d0f7a8e656a706a83fae508bac516436f6860fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @lbnqduy11805/studious-memory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8be405b7389972c1c848ccf1ee4a873140a945c75e3593de98642061da7d5520 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shopify-app-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ab44e75760c84102aeb55e53e2c77bb85fc0839e0873eb6dc778f14756e0bd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-24578 RaspberryMatic Unauthenticated Remote Code Execution vulnerability through HMServer File Upload

RaspberryMatic is an open-source operating system for HomeMatic internet-of-things devices. RaspberryMatic / OCCU prior to version 3.75.6.20240316 contains a unauthenticated remote code execution RCE vulnerability, caused by multiple issues within the Java based HMIPServer.jar component...