Malicious code in datadog-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46a70a0a369af2d6ce1f5671b3b2361c5a4f572f3ebe72d4a7901a367f8993bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in intercom-react-native.podspec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7abac0d25d94aaefe28f345fed96e1b39bc48cf2a461e080bc7932439219bfd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dd-sdk-reactnative-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43af4d12510523dde9f54d71b7b01cf7331b60e5cb78a8bfeb59e6d733b0bb53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in datadog-agent-github-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9002ec7ae8e71f521014b440d4e81aea944c0c36aca8f9cd4c01bd5e609626cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1844 Malicious code in cat-webcomponent-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e416fba4ad4098c98b9a1b6b381472b248c0fc0dd977333c87e9f707251deb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

prepareWithdrawAll should not be external

Lines of code Vulnerability details Impact Despite commented as Internal Core Implementations, prepareWithdrawAll is external. There also lack guarantee that prepareWithdrawAll is called before withdrawAll. Proof of Concept /// ===== Internal Core Implementations ===== function prepareWithdrawAll...

Malicious code in dig-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c176c48e859438f13c62cd8bdc00448ce481a0e839891da1ab3211df7d387bb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @manomano-toolbox/pim-management (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd08f90f97f53d7b76dad3a2a10ed8031f6af87a735ea7bfeb12bc0290aefb4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in misk-web-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b30cdf42b390fade729b29ee9371cd54ab7a9fa1e59b1595ffaf83f1ca153d66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ual-reactjs-renderer-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51f103cbd42e4c8208e6cc75f422cc09ce4766ad160032a8fbd7529826851757 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in atlassian-sketch-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 127fce48a3621d82c27eb14ee5dfa2aa7084e2b7c2cff9fe775be9063948f9eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yoti_2020 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec41fbfb14efe2e116f592623716f4c4a245d5a7c0a1b58913cef95948e649ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rkpacktest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64e155982820eba462dcbfa1616d8d13143172fae3248f9487a1d66ecfb674aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @commercialsalesandmarketing/contact-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1e61eaf68c0708ce952ccab5bf707f36175c24e35f12127a74b04dbbf0cfd45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dontblowthisoff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf5c38fb9ecda26d5c95ebecbd9228db2f2e33cd6075678b149fcd1ed40e7691 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1929 Malicious code in clinstestpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6575bc8b9c9df76806967bea87397ecc8df21860f0a7f91b4e5a8ffc317e8db8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-infra/users-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf73169208787ddafa275f2837c6596a96541a2c4b1526a4cdd468678bfa4e47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-870 Malicious code in adroit-websdk-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e25eae4b9ba41f852f07d6769513bbe90b6bd7e6771c3780f4ee215da20335e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Unauthorized Access Vulnerability in Rongdu Guarantee Business Management System of Hangzhou Rongdu Technology Co.

Rongdu Technology is a leading financial technology system software and solution service provider, a strategic investment enterprise of Hang Seng Electronics, providing banking intelligent marketing system, guarantee business management system, factoring system, small loan business management...

Authentication flaw

The package github.com/tyktechnologies/tyk-identity-broker before 1.1.1 are vulnerable to Authentication Bypass via the Go XML parser which can cause SAML authentication bypass. This is because the XML parser doesn’t guarantee integrity in the XML round-trip encoding/decoding XML data...