MAL-2023-8561 Malicious code in manage-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8133914dcd4458caa397163e4785d4697b3af97dcdf5a8b3bd980df5edbc35e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8560 Malicious code in footnote-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d840202ac5d63ed914d72fb9165d5dacf64b5449aeca46d1fb168c12f7627160 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8559 Malicious code in autocomplete-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9655da8503f9549c9411d13c7b5306dd5b29247b41ee5857561d74aa7c118dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8546 Malicious code in xfinity-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56b70e09dfa991a04792438328717b5904e3250501889b394aaef6f02bd5890a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8505 Malicious code in @tpgroup/tpg-icon-inventory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cacf2bbe7dd64c7907b4bd3e3bf524d701e8c930d3aa540683dad15d74fdd15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8491 Malicious code in one-host-app-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c17ed3eae2517098a0d480f80d6166610d23a6d0e082bf72cc8853b96a71a613 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8461 Malicious code in odn-static-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a49d8b382070675781a5628be927a75dfaa48ed927b0dbb4d39f49cde36bbc6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8452 Malicious code in bt8-wax-front-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94edc2702431bf0ca422456566133b260f48b21d456989d157837fbf5e4d80ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8450 Malicious code in airslate-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 187dae9cdc21ec49b7d2dd1609dcfe155123738e42a66793b16990e78bb18225 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8449 Malicious code in airslate-image-uploader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 108a6e072252da4d719844c42ffb41e5a8fbb92cbfdd9305086a108dfc14233a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8435 Malicious code in tvaultuiv2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5ffe7dc0907e6c0a6e1fc443558d8a6117e991d3b392e45eded0a16a22388fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8432 Malicious code in qlkube-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d87aacc83b4b0b0d9201968dc75c81eee7b94e2faa03aae434e083f3c825213 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

[updated] Atlassian: “Take immediate action” to patch your Confluence Data Center and Server instances

Atlassian has released an advisory about a critical severity authentication vulnerability in the Confluence Server and Data Center. All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. Atlassian Cloud sites are not impacted by this vulnerability, so if...

MAL-2023-8427 Malicious code in oathkeeper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea73ad8dc34b94ac335bdd186e92de178e5f301accb270da9e62f110c97920c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8418 Malicious code in demo-saas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7346c8d2670e05b376c36a799aafbe36cad56e319900ab63a766fea56e0985cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8410 Malicious code in discordstream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3801c3a70b5c9331598f373a5ca452e1121433f365c2b75d35db99042e4b995 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: IBM Financial Transaction Manager v3.2.x is vulnerable to XML External Entity Injection (XXE)

Summary An XML External Entity Injection XXE vulnerability in Java based XML parsers within IBM Financial Transaction Manager was addressed. Vulnerability Details CVEID:CVE-2023-35892 DESCRIPTION: IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to an XML External Entity...

MAL-2023-8409 Malicious code in fadam-com-test-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1028a57be58715c37bd0e3271700d149d5b4c4a1a3ddb1c825878cb160570127 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8404 Malicious code in eslint-plugin-blade (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aae9177af783553501be9b3995cd5eebfa3a3aaef47e65237aa9f29e4630b64d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8387 Malicious code in very-bad-npm-package2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a584dd679c45e7c26cb11a9996bf739b091a6bd7e73289844b51a3a48102a1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...