MAL-2023-795 Malicious code in speedtestgod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42642a07abf71a7986c009eabcb9646de62538ed2712bed7492f7e6ee96e65d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-163 Malicious code in cathode-versions-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0e16e7e4327697f795d989d71781e02f4036cfffca1d0dce1e5b9a6f0a54f7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-500 Malicious code in hiring-without-whiteboards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c86a6c1ba7eeb700ad39245d9f6e5bd53cee80dcfdd43819e13ea756c0cc3be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-474 Malicious code in github-actions-slack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0838fb57bbc4692fe40f976eb83599cc51f263c1c3a3eb1b231cbb7939a34a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-84 Malicious code in agicap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 465266c3b881f48bc224164b49f94ea8b953027d11598ab6c0f4525aee9b5e93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-808 Malicious code in stake.fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c198061bbe55dd2f115328a3de12953984382e472f1c6044d6eb9ea36b13edb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-243 Malicious code in dependancy_confusion_test_tal3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c56293eb90ae309c58adb4cbfd852c54166ebcba11b6f6f6e5c64ce5a623c24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-239 Malicious code in dep_pre_install_v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ca672394610755b0d64f939f96ae74c434cdcaf46aeef6040bf12ee470a905a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-157 Malicious code in canopy-common-fo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd983235acbe60ea7ab43744193a666e61c5bc35a50e7332217b14925f9d557c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-585 Malicious code in maw-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e087ddeaa6fa26778dc4e7f70a99bcca922ebb491a7166039a58392e118e5f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Royal Elementor Addons Plugin <= 1.3.59 is vulnerable to Cross Site Scripting (XSS)

Software Royal Elementor Addons Type Plugin Vulnerable versions = 1.3.59 Fixed in 1.3.60 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4710 Patch priority High CVSS severity High 6.1 Developer WProyal PSID 88dfeeb21d4c Credits Ramuel Gall Required...

MAL-2022-5328 Malicious code in phup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dac74638b6d2daf3c5fba99cb693badc947e824ec0622ec155ad7f1a0ee3100 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5329 Malicious code in phup.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3505fe1eb9dd6b5d7010e73296e7952e76792f78261783958c23ebb1e88f20c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6239 Malicious code in sponsor-jobs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ff91cd8369dec7dda50c1d1b495256642f2f035c7789c5f99a6520094deabc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

When liquidation is not locked, anyone can liquidate another persons' collateral

Lines of code Vulnerability details Impact Petty users can liquidate other people's NFT immediately when the liquidation threshold is reached. Proof of Concept The owner controls the function setLiquidationsLocked and calls the function when a collateral needs to be liquidated function...

Users may be liquidated right after taking maximal debt

Lines of code Vulnerability details Impact Since there's no gap between the maximal LTV and the liquidation LTV, user positions may be liquidated as soon as maximal debt is taken, without leaving room for collateral and Papr token prices fluctuations. Users have no chance to add more collateral o...

MAL-2022-4717 Malicious code in mrpackage1-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd54e93c66de2678ac942d0f8be89b517fa2bb343e1755139c6702f4d29ca809 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5533 Malicious code in pv_ho3ein (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7aa33fb89a5d7bd38f7efcced8a18b26c18b81d9e112bfd15547d569cee8f2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3751 Malicious code in icon-ionicons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3ea0dd0a77658f88ec68d9fe8b13765b6debe58e5a5bb0aa726f11c8d08d42e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3936 Malicious code in ionpackages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9382fa773715062b398a7ecc33faf317132a1d55869770dfd1ea5295fe068399 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...