Malicious code in djsmusiccc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97843d99a4edd4ddf8c30e9c20d9779108bf139af236b556a657e48805a1b567 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-9141 · Owlet · Owlet Cam

Name of the Vulnerable Software and Affected Versions: Owlet Cam versions v1 and v2 Description: A command injection vulnerability exists in the IOCTL that manages OTA updates, allowing a specially crafted command to lead to command execution as the root user. An attacker can make authenticated...

MAL-2023-8324 Malicious code in eeddffrrvvrr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7afdfe5e3bb61da148efdfb6b6c94261c8955ad179766fbc82a55883fca6b411 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8244 Malicious code in arcotest1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 729c32fc154769efa0f919edac30e00d9e8a63dc05f166d3a156924f939750f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8086 Malicious code in web3tool-providers-ws (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1728380aea0ef49ccdd469e28f2ce128f28bd46843f086103098fab9badafab7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7926 Malicious code in @intact-lab/ngx-iceberg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63ed3b552a74f73b31973f3f5a4a21e344617adcaef85804c109a61a1956facc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1523 Malicious code in personal-profile-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5dfd44b67730d9649f2fa1cdf8999719e5f34e7e9a6b918daf0de76f176a73e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1051 Malicious code in mecfront (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cde288eb11cc0552aa1849757cd35cebfbb395bf863cc14bc96b515a2eab3bc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-375 Malicious code in fc-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a94b568ae69bdc27fd6f57fbb8cb60fde1777793150449ba9cb6895756e03a6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-816 Malicious code in stepping-stone-the-stone-series-2-by-dakota-willink-on-mac-full-volumes- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de4cf640f96f10961f05d0b92040c27c3ddac884865e0fc98755cc84eab11ada Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-865 Malicious code in the-best-we-could-do-by-thi-bui-on-ipad-new-format- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69c217d4c0500cd572578b3d4c2668c30df765a44d665c8eaef5b3906c09ce73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-655 Malicious code in one-of-us-is-lying-one-of-us-is-lying-1-by-karen-m-mcmanus-online-full-chapters- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29363c3ead0fb16e0f9653c9e4d460a997774e8c71faa1e9d235c232c4026017 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Patch CVE-2023-23397 Immediately: What You Need To Know and Do

We break down the basic information of CVE-2023-23397, the zero-day, zero-touch vulnerability that was rated 9.8 on the Common Vulnerability Scoring System CVSS scale...

CVE-2023-25610 a critical RCE vulnerability in FortiOS: everything you need to know

CVE-2023-25610 is a critical RCE vulnerability in FortiOS. This vulnerability is a buffer underwrite bug in the administrative interface which could allow a remote unauthenticated attacker to execute code using specially crafted requests. Affected customers should patch immediately...

MAL-2023-578 Malicious code in malicious-package-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adfb94ffd01d87848b7f1bf2ae04932224574efbda30f7ae3ecd5520c4c57d95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6482 Malicious code in test-inherited-attrs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f962e7dc884922f90141ffeaa6fce29bca1e10e59db0b32f2888ae1fdea2bd70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5153 Malicious code in oujec.assigs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1526ee4b11e3b880b8cb125e22e08f5a438d34dfdfb87be913d706167f6a321d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3696 Malicious code in htmlwebpacplulin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed1f6d7c6de182ae9e5768c99e08b48416d716a9002d8a1ade198bb951fbf27f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3005 Malicious code in feiendlyerrorswebpackplugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c22d94445066e2d4a5df3fe8ad9075fd73badba4484223cdba4f37b2907dd9ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2211 Malicious code in counfistire (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 610e95022b623a15422217cbd933a125f6d8a7dd86a5f7b808b6a6f867893f6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...