nodejs: Certificate Verification Bypass via String Injection

It was found that node.js did not safely read the x509 certificate generalName format properly, resulting in data injection. A certificate could use a specially crafted extension in order to be successfully validated, permitting an attacker to impersonate a trusted host...

Malicious code in cdw-portal-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8245106b657d302dae8c93f3c54309e88881276a77a80dd838e69f2b2543e6d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in usaa-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c08943170a4845decee28f2b70563513b6280f1d54e34a0d4e559ca7dd5afd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in minimum-flow-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 011d620beda8692dd780e1c593c87bc37c1b888ff9e017f9cfbb969f86469a52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in opbox-build-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de28bacc1f61f09e5b27ca443c3518a782a3fa7286a891c60d87b35c5c1c1db4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c31454c557401adaac67592f29b0ecaf64077245947ff25caffa47a75fcc67e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flotchart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0540140a451be15c34d37044e87108e3b27acd171747fc8eef97e3cfa215fdf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @moczadlo/package_one (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f075c07a4253b067ff91d26b3dc9ae04aa088b1bf48ebf6c0065cadbd164b119 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in evil-test-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5048a00a2021f79ef262234d0fbbc95d2a2c3f1cebcf2799666295c6fefbaace Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wf-translate-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d1328b0a046ab215c07647d9ab5ec8f409dbbf97c2fdfb04ff82004faf5340c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aws-track-and-trace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d989d00b9eaf887318066983a92806b286fb32f6a58adf315ab01e8bebed6902 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in runkit-embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d1a12cf5df9a43c706a5f3c73571ad7199f6a81dd67d4b94d6b91ad149a5f5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in amplify_default (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e94406dc32eb37022956702b27b4ce9487936617801a7960ea52025527e88ff4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in media-types-service-tracing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ed609347a347f0e8ee4901959884ebab530fc19b319cede317a7ab5444ba6a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spotify-event-sender (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a225d38807bfd3867ba6c251cf5eb2a8597b4e96fd1f89928f9c6fd0293a261f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in multiplesegmentsprovider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48ce3cb677969016d45f44ec99b19a4cf03fbfddaa08f3f3cd56773134a344b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bufferreplacementhelper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0551e4e83d942c62ef818c01f48e5a517e6c5003509ea66557ebb65877be410 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mns-core-dockerr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a586568cb282b668c838241bfccb56ee537c1e7edea5a80dc74dfcfa95171c98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dwanalytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0af56da555ef148cc4266393425ffed31fd60103582a1ef7823a18b75feeed92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in monday-integration-quickstart-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f9d04458f46566c206866695d05f24a298848cee6cd7a96d51652e770671e71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...