Malicious code in webpack-dev-fixture (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ef02287b144b28d10ac4910d268b3a6ad2c870385d1ae85c1ec2f144b176c58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-6324 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.x through 9.4.x Description: The issue is related to a weak encoding for a NDMP password in Dell PowerScale OneFS. A malicious and privileged local attacker could potentially exploit this, leading to a full...

Malicious code in jquery_ui_checkbowwx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 355813cd2a93a9e682c5c08d18c2a94a88961692b4d92bb41d931a48b70fcfb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-34438

Dell PowerScale OneFS, versions 8.2.x-9.4.0.x, contain a privilege context switching error. A local authenticated malicious user with high privileges could potentially exploit this vulnerability, leading to full system compromise. This impacts compliance mode clusters...

CVE-2022-34438

Dell PowerScale OneFS, versions 8.2.x-9.4.0.x, contain a privilege context switching error. A local authenticated malicious user with high privileges could potentially exploit this vulnerability, leading to full system compromise. This impacts compliance mode clusters...

CVE-2022-34437

Dell PowerScale OneFS, versions 8.2.2-9.3.0, contain an OS command injection vulnerability. A privileged local malicious user could potentially exploit this vulnerability, leading to a full system compromise. This impacts compliance mode clusters...

MAL-2022-459 Malicious code in @nexthink/arm-jwt-decoder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51df48a51ecff12b69c9a30fb95f37dcd19cbf557c11e050fb5cd202e6a1d8be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v180 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec361e941f5797b71bd3cb382920156e9ea26a2471f770195f5d7bd6295029c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3902 Malicious code in internallib_v607 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 931eca513bda2e5ce823f67c77a9e9ae645bf8bdfaad07b6e6afb054cca22438 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b1422905ccc2130b6c7069e69a3addae1ef96e39e14de364209f65a2eb6f7ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v340 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43570bd043aa581a3eeb3e0fa059e89cbdd9eb7be6e3e3c531c90f5d71dca94b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in --legacy-peer-deps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9016f41e70e542399b68b5d9e362563751dedbff976a3bd66808702c420f35f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in brbsainath (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88c8649206ee38eb37f336d21622267ccf1945436001cadbc0c11177aa1ce829 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-34371

Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.3, contain an unprotected transport of credentials vulnerability. A malicious unprivileged network attacker could potentially exploit this vulnerability, leading to full system compromise...

CVE-2022-34371

Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.3, contain an unprotected transport of credentials vulnerability. A malicious unprivileged network attacker could potentially exploit this vulnerability, leading to full system compromise...

MAL-2022-7003 Malicious code in vuez-template-compile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware faf4115988e70fed761d8f3611ce6b309fa2efe3560f15a0a66e9471e34fe3b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vinyl-sf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed2dad322585438b43d2a3fb7030121941a108960bb7d0d97fe884da9ef60b28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2615 Malicious code in duplex-child-rocess (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b3ec325a6dc92f083b06d506e89526c20430b1740c4af5e7d3df470e48c455f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6398 Malicious code in sysezjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 651a5b2d4e206e0f0700366ce58d1148feb5336f903b4cff8973c63f5f30d7d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nuique-random-arr-y (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8944275bf57308caccda8e710df70f752ccdb2562e0efb3bad97812ea26eee3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...