Malicious code in chat-web-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adbb94fdf28fcde1a3452a2f9dfb7b4c0dc46bdb48a3858902d42f8e03e7293a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in smartsuite-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3f503ab64a15a88463b98540139d7ea61f6e362eb6328a2768419fd1eba57cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3-0.20.7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b862a70b61a696bec847f0c0df8826bd0b41034d6cd593a8f578765c42ff15fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apm-synthtrace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 501f87c261d9652eac673b3a97c22007a4d65d77b7511efef4882fa25a86b153 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in harp-atlas-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 022ae8a7abfe3be6606aca88e7aa6a0c1f14c518c523a6652b335f01d520e3b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @maariv/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44152863a6191cb2b219d60ac5f87ffba9ed77691affb59704f78501bdbb0d1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @flameshot/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8bbca4a9cd0a35a35928860188f38aa877f6edfa6b4eb2b65c110d2d83990bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @cvshealth/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30d7e0d2368f4bb7382c9a23dcae6aba933a05bea471af92d87a31f12c48252f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @codacontent/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70b961c590d0a59efdc7d621147c2cc0e70795e021af0d4ef4166346c6a26436 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ngx-translate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1100a503faf33aad0489ce41d03404d9f250bc81751ec29be8109e87d9c6d6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cito-social (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e35d16a546269a8f49c46fe344c1984d18fdf4a9ea1a90721b49fd75b6404c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in twofactor_totp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db2224050434153fb8bc046b6386f91fbdba1537beff176e755987de07104949 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in theme-whale-light (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c40def8d41c4b7ebb0169b850854b2a3cbdbd547e0e5e4ab2294ecf310c1b471 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in intercom-react-native.podspec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7abac0d25d94aaefe28f345fed96e1b39bc48cf2a461e080bc7932439219bfd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in datadog-agent-github-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9002ec7ae8e71f521014b440d4e81aea944c0c36aca8f9cd4c01bd5e609626cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in datadog-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46a70a0a369af2d6ce1f5671b3b2361c5a4f572f3ebe72d4a7901a367f8993bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dd-sdk-reactnative-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43af4d12510523dde9f54d71b7b01cf7331b60e5cb78a8bfeb59e6d733b0bb53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1844 Malicious code in cat-webcomponent-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e416fba4ad4098c98b9a1b6b381472b248c0fc0dd977333c87e9f707251deb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

prepareWithdrawAll should not be external

Lines of code Vulnerability details Impact Despite commented as Internal Core Implementations, prepareWithdrawAll is external. There also lack guarantee that prepareWithdrawAll is called before withdrawAll. Proof of Concept /// ===== Internal Core Implementations ===== function prepareWithdrawAll...

Malicious code in dig-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c176c48e859438f13c62cd8bdc00448ce481a0e839891da1ab3211df7d387bb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...