MAL-2024-7913 Malicious code in @cdc-internal/mkt-nav-footer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03f66f3f203cc6f24d8cb93220716582b3379ca1cfb4478f470c4317051b7407 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7909 Malicious code in @ads-placements-frontend/claim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2cf37271b36359c24732be37deae1d1b87b8fc4c769bfff1c0262f065b8e4c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8008 Malicious code in yuriosid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1797849b8d6791e2dbf86f150f160140b8625b0a658a218f594253ce161dcad7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7979 Malicious code in ooflienro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 460421ad4c16e7311d70839005722b20fb615154541c29ea376e7029a210e50f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7998 Malicious code in uewopdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 840acd749ca1cc60804a43acffb1a61e836448f4ac5759d429f3268dcdd2a512 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7939 Malicious code in bignit.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43b97d2fd30b80db3253e6999e0e6bbc4ba13e245a6eeb28a167f1eeeefec161 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-28563 · WordPress · Nextgen Gallery

Name of the Vulnerable Software and Affected Versions: NextGEN Gallery versions 3.59.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, which can lead to malicious scri...

MAL-2024-7865 Malicious code in some-dependency-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56bfd6dfa88a2c4dc649901d7693d3996a1297067a93e70d1b3382ff9b1448f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7868 Malicious code in wix-smarts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df57af06b1b5cd455e4d81a7d9979d518578a2b49fd8b99019d721270edefa65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-23626 · Unknown · Plug&Track Sensor Net Connect V2

Name of the Vulnerable Software and Affected Versions: Plug&Track Sensor Net Connect V2 version 2.24 Description: A Cross-Site Request Forgery CSRF issue can be exploited by remote attackers to perform state-changing operations with administrative privileges. This is done by luring authenticated...

MAL-2024-7847 Malicious code in ent-widget-citizenship (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cf62b2434507ed956589c6ccdb8a0361e0f7711f7625eb142f7d046a2dfc20d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7805 Malicious code in httpsflood (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec2e3678fb0fcd1e38fa8e38b706128b14d6cd88892b5d2eace1580f584baa8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7799 Malicious code in smart-input-textarea (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ffba47b31768b1363d5fd651769eb8bcb3f1112ca6db601bd51c7c44ec58adb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7785 Malicious code in sap-abort (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4e2bde6bdff35f1e9b3c13cc8e0202b7b2b76d1390e81fc3ea3d484340f5f3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7770 Malicious code in mock_simple_module_relative (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5314a68f10a03af92b308ae221d15aa143a97ae197cf96c655476db5638a084b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7753 Malicious code in jfrog-jfconfig-grpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 177a2d1912b1051b4347d51ff6410db1077d40c3cd21468d673acef023e3e1da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-30699 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns the Linux kernel, where the function adjust jmp off incorrectly used the insn-imm field for all overflow checks. This is incorrect because it should only be done for...

MAL-2024-7705 Malicious code in flammerxdjson (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8b6b80199d2f6500f4b47a77309fa995e34a633ea2fa5f5e265d0b1ffb7b085 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7719 Malicious code in stylesnox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 231ba61276a9baae8583e87d40a97b7ee4c4dff960555a6df856c57ed2adff0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7454 Malicious code in kimakq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c68362e508749ab3e543eec3f10a706a187583904a87ca0f48afaa95c608a37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...