2058 matches found
MAL-2023-8382 Malicious code in fca-kemdev (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 287f0297a75a759baf26a653469422f43653a6ccb17b28941f58e54279b623b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8373 Malicious code in @bitsoex/react-design-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e89332fc8c2abca1b7c5a14da73534cf2f08bbedb6a61665dd691b87893e008 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8375 Malicious code in @homelte_dev/frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f2d02301268cfef4a6a2de3fb9e7e323b5de41a41a17af9056a056400d6c41b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8334 Malicious code in @emon-bhai/fca-emon-bhai-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dda8cf587fd89dbb973a1ad2d9121439dd65185b74c76fe48d5425e2967f400 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8339 Malicious code in fas_elbridge_server (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9eeb55ec40cca8a30b5ca2b20ede9234fa59a23da2fa5cef2ad9c3e461eba4c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-QPPJ-FM5R-HXR3 HTTP/2 Stream Cancellation Attack
HTTP/2 Rapid reset attack The HTTP/2 protocol allows clients to indicate to the server that a previous stream should be canceled by sending a RSTSTREAM frame. The protocol does not require the client and server to coordinate the cancellation in any way, the client may do it unilaterally. The clie...
MAL-2023-8320 Malicious code in myaig-broker-portal-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fd67b15eabdced87c5fbe689d7e0c286991ac7bb879f2f2135f5f2538a4e549 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8317 Malicious code in zf-apigility (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76f7f25b98a2fb2e5c3d03a497a3732a067e5e1b6e7334a7aaf06310777b479e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8314 Malicious code in data-layer-v8 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e4c8f846b0ddb1097d47c477e40c0ce16ee83df9e0e4d2ad331a6f638a0c0e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8319 Malicious code in f0-authorizer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b198073a3c6c8c48eaa78a60790eebe24d1bce34d24bdcbba4e0f077f329c56b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8275 Malicious code in jsonpjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8597bb87092b400a3e1a8789fa9cc44d28b77991870740d6d524c493feac5339 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8274 Malicious code in fpmsm-icon (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d8ebde642c8439834899b9dc62d07f364c1ac2915dd5327f7ec1be80a0ffcac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8240 Malicious code in peekatchuysharnlesspackage (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4db2b740e4d7fc22fc59a9c9791266dadf9ef6b050ec445676abbe682c6a141 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8238 Malicious code in manhdzfca (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 957bf8a2482f5b5f075c546737a5eb4b845abb4e402d13e458b52f091496b073 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8204 Malicious code in @zettle-bo/react-router-dom (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d15f8bb2c4ca588ab243f077851d021201eb274122b32a38b91cc93d7d03d1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8205 Malicious code in @zettle-bo/react-spa (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 476ca9163b9976a64e9b1596fb739c8dc2c4725cd2f321d998e6da3cf072e3ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8185 Malicious code in agopoweryea123 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca5c5e5ef3f588541558976ee86112900b01f69ca9fe775b740d12315b8ddd01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8182 Malicious code in team-atf (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc4bc178a5c3fa44d9ed6dfa7c429692ad3bb5b15556ee5cfcf089935bc92d54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8167 Malicious code in @spgy/eslint-plugin-spgy-fe (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f153ed03ad775543b9a2c5ba45f744fdb6dc3bdd3de7734a273488881a1353a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8180 Malicious code in simple-team-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad5da4b4631227adabb1a524dc451f3f7fce259d5c7c64d148e91f6edc74d4a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...