MAL-2023-8724 Malicious code in techouvot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81e92cd0380e0b73b5c2ffb13126f2d7afccf95c07ee913368b10d98715bfd2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in docusaurus-plugin-matamoh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2587fce317c90b4371750f6dc2bd4c7d9ea86770d868b63eabf68afc96029c02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cobrowse-visitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfe866d98bd76a71b60029f68eefcd3158b2870ec3cf49a37fda9efa17fd05bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in djsmusicccsz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed665017a997e34358546e65d661b61814f370cddf415c746b5506036e203ac2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airslate-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a38e9b5638e56d7f1a1fb5d3d5d396fc0a8aee158c609b74bce384f3a4d79cd5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Executor can effectively bypass _checkSubAccountSecurityConfig by adding a new Module

Lines of code Vulnerability details Impact An Executor is an account authorized to perform module execution on a subAccount through the ExecutorPlugin. Gnosis Safe Modules manage to bypass the entire guard logic Safe 1.5 has that new guard hook, but there's also no hook logic done in Brahma. For...

Malicious code in daftar-10-bandar-togel-singapore-terpercaya-agen-pay4d-terbesar-di-asia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c010afee8561b173cf2644e0cf79595bc1f4c292cf5d3c68a90de24f2a655cab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dhi-lambda-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3351ebceada844e3c37823d1758b1dc0dde8032ecee467287317086cdc5b3d01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Fedora 38 : xen (2023-4125279976)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-4125279976 advisory. arm32: The cache may not be properly cleaned/invalidated XSA-437, CVE-2023-34321 top-level shadow reference dropped too early for 64-bit PV guests...

MAL-2023-8249 Malicious code in fca-priyansh1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19bfcbf8fee2d4c08a677d805be9d136607de599440c36f898bedd4d3b6d9394 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8190 Malicious code in @zettle-bo/account-statement (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e421dbf9f81cc4fbfbcfb01be2a65fa8509eb33a2be27ee6aab920ca00359f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87d4943ad77667e1d436da638aad2868bd742a2568f7f706380ef3b768a98fd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in telia-front-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 915e7468494f50f3f273a20457aa01b3aec6e0f5cae88024b0db7ec5246c32aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8104 Malicious code in fca-dongsexx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e54ae0b20028a7237a5d5284fa6a3fbae917dbe46cee4724c495d3e413eb0279 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

requestDeposit and requestRedeem do not allow for any price guarantee, opening users to sandwich attacks and other losses

Lines of code Vulnerability details Impact Request functions take only the desired input amount as a parameter, giving no way for the caller to control the fulfilment price. The price is decided by the Centrifuge mainnet only. function requestDeposituint256 assets, address owner; function...

Malicious code in mmolecule-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cd75dfd6fa092015612a7f926c3e00d1c329aae61bb248d16f548202fd68801 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dcdemo-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 050cac6602978cf16969b08af722b2632273f6a067edfed937e3bb3d08343758 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in docker-slim-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c43f388e17851e78ffe6cea282489130b04ea50c71f40d951e492b3128f019d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7918 Malicious code in cms-datocms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fac9800b3ed890acb1273186fb6afc84b6334fe3867bb6aa084305adc3310976 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1023 Malicious code in test-hacker-sharma (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e719660cef7a5f238345da6413201c023f88d40596fc85983cf0489e0d68fb9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...