MAL-2024-8476 Malicious code in @diotoborg/non-reiciendis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfc15fc5f38fd3f6e22dba7c6a6376651aa64706e3e0602a50903b3068117782 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8557 Malicious code in @diotoborg/quia-eaque-molestiae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 130c86b4e5b467f59296bf134c9b20c18912a3c346a04e295f9b7a3b8ad267ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8674 Malicious code in @diotoborg/velit-placeat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46bb200184e2cc10c5ba0b8f1e715d83db5fa972d34f0938f2cb317b71def992 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8569 Malicious code in @diotoborg/quis-fugit-possimus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3de97e1bfd22b3f69508fd3556824feb0c1d8d2aa4675023e64e59188960fb5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8311 Malicious code in @diotoborg/eum-tempora-distinctio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a5d4b1d168bf71f91f6262c1c46d9722df779c8dd61ca554a9e142dcae0b2b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8579 Malicious code in @diotoborg/quo-neque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8feabd1d57e9c96d3054cd7555e65787cba38d8f395639ba801d91949efb4ff3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-31682 · Redcap · Redcap

Name of the Vulnerable Software and Affected Versions: REDCap version 14.7.0 Description: The issue allows HTML injection via the project title of a New Project action. This can lead to resultant logout CSRF via "index.php?logout=1", and can also be used to insert a link to an external phishing...

MAL-2024-8072 Malicious code in dwt-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71538fff3798a2b42ad1f28f2cbd053e501b0e143b563f0334e005a1ed152e24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8070 Malicious code in commitlint-preset-halo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b7e833bc850b9e63b0465ff039204c0ffca31632fd1c5fec4e2b3e32e8f0878 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8074 Malicious code in idsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c11e478139565517233e5cd168607158775e6ec97e998e766d0eaab5177134c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8068 Malicious code in as-rest-api-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ce680287c711409073b5144305ae85ce29123f6841998697d979ee6414baddc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-28557 · Unknown · Listingpro

Name of the Vulnerable Software and Affected Versions: ListingPro versions through 2.9.4 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows attackers to exploit the system, potentially leading ...

MAL-2024-8061 Malicious code in react-rps-boilerplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b11c1a1b418f9d157a025f06882888a1836ebd32d5cec473f4aca9c82cf8f2ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8063 Malicious code in side-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9233d92d37692726bc693958e27369fe68aa103372f8d54bc94628aa64e1bfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8058 Malicious code in fxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f1f1a280982015f3ff40190b739a28eacd06aa84937889ff629cf2cb7dd63d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8033 Malicious code in glitchgoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8ea318097b9bd0a522dedb1104a0e50a0b0b270c5eb5db1e15a1bae67bfc036 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8035 Malicious code in glitchverse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 094e280c6d5677f7322c73e7c7f38c15f88a029102a253aca3fa2842ab7744e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8034 Malicious code in glitchhub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 757bd22d021a5c100b3f73603911571905c7f3b4ef9dcb45297ddf429ed2ae81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8029 Malicious code in @digital-experience/test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26be8e6356ffa856692e9aa6cfa8b488f57d44be07cef5db057a521883825b42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8037 Malicious code in prettier-config-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4241fd6088878cd356569ae38a56d91f4c9f0819334d7fdf2fd40546ea6143e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...