MAL-2025-2508 Malicious code in gatsby-starter-hello-world (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6c7747634dd4e3ce4eb97de472957ba6fd913f4eff5887068d5d266c4957908 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gatsby-starter-hello-world (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6c7747634dd4e3ce4eb97de472957ba6fd913f4eff5887068d5d266c4957908 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in gatsby-starter-gitlab

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2023-8431 Malicious code in gatsby-starter-gitlab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bc23995a775ff33fc2732574cfd95b0d8efee1cdcadd229b67acde3123fac5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gatsby-starter-gitlab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bc23995a775ff33fc2732574cfd95b0d8efee1cdcadd229b67acde3123fac5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

gatsby-starter-thepuzzlers-boxenstop (>=1.1.0, <=1.1.1), gatsby-starter-thepuzzlers-core (>=1.1.0, <=1.1.1) +1 more potentially affected by CVE-2023-34238 via gatsby (5.8.1)

gatsby NPM version 5.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on gatsby and may be impacted: - gatsby-starter-thepuzzlers-boxenstop =1.1.0, =1.1.0, =1.1.0, =1.1.1 Source cves: CVE-2023-34238 Source advisory: GHSA-C6F8-8R25-C4GC...

gatsby-starter-thepuzzlers-boxenstop (>=1.1.0, <=1.1.1), gatsby-starter-thepuzzlers-core (>=1.1.0, <=1.1.1) +1 more potentially affected by CVE-2023-34238 via gatsby (5.8.1)

gatsby NPM version 5.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on gatsby and may be impacted: - gatsby-starter-thepuzzlers-boxenstop =1.1.0, =1.1.0, =1.1.0, =1.1.1 Source cves: CVE-2023-34238 Source advisory: OSV:GHSA-C6F8-8R25-C4GC...

gatsby-starter-thepuzzlers-boxenstop (>=1.1.0, <=1.1.1), gatsby-starter-thepuzzlers-core (>=1.1.0, <=1.1.1) +1 more potentially affected by CVE-2023-34238 via gatsby (5.8.1)

gatsby NPM version 5.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on gatsby and may be impacted: - gatsby-starter-thepuzzlers-boxenstop =1.1.0, =1.1.0, =1.1.0, =1.1.1 Source cves: CVE-2023-34238 Source advisory: MEND:CVE-2023-34238...