CVE-2024-40637

CVE-2024-40637 affects dbt-core where installing a package can override macros, materializations, and other core components, potentially allowing malicious packages to inject harmful code. Root cause: implicit override of built-in materializations from installed packages. Impact is described as h...

CVE-2024-40637 Implicit override for built-in materializations from installed packages in dbt-core

dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications. When a user installs a package in dbt, it has the ability to override macros, materializations, and other core components of dbt. This is by design, as it...

CVE-2024-40637 Implicit override for built-in materializations from installed packages in dbt-core

dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications. When a user installs a package in dbt, it has the ability to override macros, materializations, and other core components of dbt. This is by design, as it...

Malicious code in moti-dep-con-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5bc71f5232122aed2afbe9d2cf3ba2af4b88c9daf47d5dd53be1010621e218c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sap-boards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0f03ca612a15163c77abfa2590e258d664e33bc5d26670a73d6affe79ae0c8b7 The OpenSSF Package Analysis project identified 'sap-boards' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7667 Malicious code in sap-categoryid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5a2fe1c470d8ba6b59f035e8e12de6301dcfa748ec23614655546bbfae264053 The OpenSSF Package Analysis project identified 'sap-categoryid' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-authenticate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4011b4682df361885068a85fb964ef88af5e0fd77d05306416b10e10c5cb9b6e The OpenSSF Package Analysis project identified 'sap-authenticate' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-badfiles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4a9459e9f1bcf3b7c028ace7fe4af0c22616ec0e041f4f784c04288e1e3d4c79 The OpenSSF Package Analysis project identified 'sap-badfiles' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93f29c39b0fbe0dbf454927f2f6ee05e0adbb099f497b8dcc9f3e5ced8bb2ea1 The OpenSSF Package Analysis project identified 'sap-as' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2024-7673 Malicious code in sap-cd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b129ce991640a28395649d0743d86a38416052a617e290ac3fbe220ab780351c The OpenSSF Package Analysis project identified 'sap-cd' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicate...

Malicious code in sap-callf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3208f6d862144dd85f15a74236b1f1a27be76127751a61fce66d793d16eab40f The OpenSSF Package Analysis project identified 'sap-callf' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-category (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a75ba0843d7dc2bd9dc65a40834751664a0673576a268a29f67b5d8a9037ce39 The OpenSSF Package Analysis project identified 'sap-category' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-bucket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9012927afba575f7238a84997d4c3987b6dfa74ec9e0bd0c1a1535eeffa6298f The OpenSSF Package Analysis project identified 'sap-bucket' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-bitrate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ff1af64f5f4528b78c86fd371ecec8b847a0e8847fdacf2326a640bc54f7ac65 The OpenSSF Package Analysis project identified 'sap-bitrate' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-bg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 20f6a3120bac488c4ab4a84c2bb18fa286a47953973574e3a4e003b7722753b8 The OpenSSF Package Analysis project identified 'sap-bg' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicate...

Malicious code in sap-birthday (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis df8c9e26a14d9264266f8c3e924fb781e39a530c0c3c6f57a87b6b4605a4a4d5 The OpenSSF Package Analysis project identified 'sap-birthday' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-array (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e69ab82c52f643c89f238d79661a478bc457d54a88a041b6ea9339fa0866296 The OpenSSF Package Analysis project identified 'sap-array' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5ae8fbb8ba4434e711c35209ac7bc8e0d398cb5387e9314b8ad259ea82da4a9f The OpenSSF Package Analysis project identified 'sap-adapter' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in eslint-plugin-ally-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 23310826a7310567370020e364d6dedeb87558d2ce0ffcf5bc6054d70951bf3c The OpenSSF Package Analysis project identified 'eslint-plugin-ally-rules' @ 1.0.5 npm as malicious. It is considered malicious because: - The...

MAL-2024-7089 Malicious code in cra-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e49ccaa79a7296b7f1237beb3210cabf6610aab5c68e2c349b1fff4d3b2bb332 The OpenSSF Package Analysis project identified 'cra-docs' @ 7.999.45 npm as malicious. It is considered malicious because: - The package...