Malicious code in @shenmue_dsc/fluent-ffmpeg-multistream-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3d01a5cf41e8dc5e1f1997a92ef62717b51538e2d3a2c481a7127e22e291101 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apiv2-fetcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6a736a3aae8da541778dbb3295cabdd0b7e3f0b1767bf0ee2b77d6b595741eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nylas-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f55a9a93c44b5c1883d56e29e04686d00c22261be8470feb04163ac33f285c41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-34321

Arm provides multiple helpers to clean & invalidate the cache for a given region. This is, for instance, used when allocating guest memory to ensure any writes such as the ones during scrubbing have reached memory before handing over the page to a guest. Unfortunately, the arithmetics in the...

Malicious code in obiz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c874820648667470fb18eac15b041aab609cd3bc1ad0a2ece5c2f060cc446dc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @chainxxx/act-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 664f2c7fae7cf7210c9705398c8deb45d7468131ad49bed2b3ca8738f62edf96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8724 Malicious code in techouvot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81e92cd0380e0b73b5c2ffb13126f2d7afccf95c07ee913368b10d98715bfd2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in docusaurus-plugin-matamoh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2587fce317c90b4371750f6dc2bd4c7d9ea86770d868b63eabf68afc96029c02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cobrowse-visitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfe866d98bd76a71b60029f68eefcd3158b2870ec3cf49a37fda9efa17fd05bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in djsmusicccsz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed665017a997e34358546e65d661b61814f370cddf415c746b5506036e203ac2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airslate-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a38e9b5638e56d7f1a1fb5d3d5d396fc0a8aee158c609b74bce384f3a4d79cd5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Executor can effectively bypass _checkSubAccountSecurityConfig by adding a new Module

Lines of code Vulnerability details Impact An Executor is an account authorized to perform module execution on a subAccount through the ExecutorPlugin. Gnosis Safe Modules manage to bypass the entire guard logic Safe 1.5 has that new guard hook, but there's also no hook logic done in Brahma. For...

Malicious code in daftar-10-bandar-togel-singapore-terpercaya-agen-pay4d-terbesar-di-asia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c010afee8561b173cf2644e0cf79595bc1f4c292cf5d3c68a90de24f2a655cab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dhi-lambda-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3351ebceada844e3c37823d1758b1dc0dde8032ecee467287317086cdc5b3d01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora 38 : xen (2023-4125279976)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-4125279976 advisory. arm32: The cache may not be properly cleaned/invalidated XSA-437, CVE-2023-34321 top-level shadow reference dropped too early for 64-bit PV guests...

MAL-2023-8249 Malicious code in fca-priyansh1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19bfcbf8fee2d4c08a677d805be9d136607de599440c36f898bedd4d3b6d9394 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8190 Malicious code in @zettle-bo/account-statement (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e421dbf9f81cc4fbfbcfb01be2a65fa8509eb33a2be27ee6aab920ca00359f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87d4943ad77667e1d436da638aad2868bd742a2568f7f706380ef3b768a98fd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in telia-front-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 915e7468494f50f3f273a20457aa01b3aec6e0f5cae88024b0db7ec5246c32aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8104 Malicious code in fca-dongsexx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e54ae0b20028a7237a5d5284fa6a3fbae917dbe46cee4724c495d3e413eb0279 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...