MAL-2022-3516 Malicious code in gulpplumkber (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd47464aa52fd5f08a53251d7e1d15de115fd0de331656cc6d71a5f337f24d0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3514 Malicious code in gulplosdplucgins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c22d26a691d5c655c5c62f10f64ae9700bc4eba743e44b7e883f8f281a978f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview angieslist-gulp-build-tasks is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if th...

Malicious code in gulp-csslint-lesss-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85982fe0ce26bdc8da8bfc26e08e0388a911ab5db3c0c43fc6a0a9633696ca62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3504 Malicious code in gulp-csslint-lesss-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85982fe0ce26bdc8da8bfc26e08e0388a911ab5db3c0c43fc6a0a9633696ca62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oro-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 434e907d46d7f142669cb87e668aa0f712aefab3a149d5c724727c7872fdb52e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5125 Malicious code in oro-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 434e907d46d7f142669cb87e668aa0f712aefab3a149d5c724727c7872fdb52e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ux-gulp-theming (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acf7d1b2ebe5e5b7f1f7f511b711e53f72c1b309f2eaf8d14656e1e2b45d8886 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gulp-pypugjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8269d18c3992756798836725a2cfdebc7d0ddcb0fbf1ca340210d923283ad7a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3508 Malicious code in gulp-pypugjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8269d18c3992756798836725a2cfdebc7d0ddcb0fbf1ca340210d923283ad7a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mbed-js-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1330123c2d83359c10a783e5a52022f07a271e333cae6b762d8c6caf85d8783 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4514 Malicious code in mbed-js-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1330123c2d83359c10a783e5a52022f07a271e333cae6b762d8c6caf85d8783 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gulp-browserify-thin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ef843cda125c2cda337af64084a57a7a79a488e977a9ec4ca912704ab2059c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3502 Malicious code in gulp-browserify-thin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ef843cda125c2cda337af64084a57a7a79a488e977a9ec4ca912704ab2059c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in angieslist-gulp-build-tasks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91073d8aec7654e92fde4a5136f0cb4bd9ec77e2175cae875ab44d249d299818 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Injection in gulp-scss-lint

Overview gulp-scss-lint through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands to the "exec" function located in "src/command.js" via the provided options. Recommendation Avoid using gulp-scss-lint as there is no current safe version of this module...

GHSA-G4HJ-R7R3-9RWV OS Command Injection in gulp-scss-lint

gulp-scss-lint through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands to the "exec" function located in "src/command.js" via the provided options...

OS Command Injection in gulp-scss-lint

gulp-scss-lint through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands to the "exec" function located in "src/command.js" via the provided options...

OS Command Injection in gulp-tape

gulp-tape through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of gulp-tape options...

GHSA-X67X-98X7-WV26 OS Command Injection in gulp-tape

gulp-tape through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of gulp-tape options...