Malicious code in group-management (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 367a41bb86f15b9d94cbdd028f364302346088e3fc8c5d139374c43f65c05c11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Google Pay accidentally handed out free money, bug now fixed

Days ago, several Google Pay users in the US received some unexpected cashback from Google, congratulating them "for dogfooding the Google Pay Remittance experience". Confused and a tad happy, some looked to Twitter for answers, while others aired their experiences on the /r/googlepay/ Reddit pag...

Information disclosure

Dell PowerScale OneFS versions 8.2.x-9.5.0.x contain an elevation of privilege vulnerability. A low-privileged local attacker could potentially exploit this vulnerability, leading to Denial of service, escalation of privileges, and information disclosure. This vulnerability breaks the compliance...

MAL-2023-468 Malicious code in gd-apply (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28fa196d02660fc75efc9c71f8cf8ee2ddc35286c432de6b7aa4f801a00a0013 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tdv2-applet-stream-her (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61f1a3a4e828660101ffe77b0a2ddc778e1877603d971ba4e76e4f7d85692a34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-hnn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76a92f29775e28abc7462b6692bc5ffa08e51b5889f6f65e63fe9810e8794d62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @superbet-group/martech.lib.google-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 623842b7ea3cf0abe8ef8b80d5eed291e97bcc42d9ad072da19aca5c6d3d456c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-330 Malicious code in fc-address-lookup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5feb9e0be7037fdbecf7bb66bc86bef489c699497fb662d27506efc7f03889ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-GFGM-CHR3-X6PX prettytable-rs: Force cast a &Vec<T> to &[T] may lead to undefined behavior

In function Table::asref, a reference of vector is force cast to slice. There are multiple problems here: 1. To guarantee the size is correct, we have to first do Vec::shrinktofit. The function requires a mutable reference, so we have to force cast from immutable to mutable, which is undefined...

zaruceneceskaokna.cz Cross Site Scripting vulnerability OBB-3071837

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2022-4753 Malicious code in myapp-by-7h3n00b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8305d7f0c460e41c74b5b2a6b311aaff28d6c91fb38e3ba4b7fd43f6f28fc2ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zezedb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ad7b177b1f26e0b059bfe28c7c8e04efc356726e476a6fad68e11373750208c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in security-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f34f022f6da3bc1dc777a1311e7aaddde9d442e08bc13025aac5639f6695280 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in auth-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware affca85a0c8e959151ae1b55f6bbc3ac15b328ded165ddd269918b33ab725cb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v199 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b392ff5b77259a428780d2bb24529596a239226553a8ece97f4c9158fcf2fdcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in e2e-test-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6572edea50875b7a4383ee4b7dbed53e89120ed815f6699c7033f43c636fc189 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in root-b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4cdbe0d6fcda449039e24f1428363107212d964420e5db8a9b3df2090e9e043 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v216 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 144eaae99291d0024df31c1ab7bdeb913ed704c53fd44a57a52a40df3c21cffd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in workbox-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8933e331d7e07ec6d6389f4a473479e2d306032d9d3b394d9243d7268c811270 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in google-iot-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b6b3105c3a643952ccd44dddd3ed028de61de359b2072023d06603b08279588 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...