Malicious code in nbaseasons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20a61520820c0194566cf71ef2c7762b3184becc1c573bc020bf63a387789700 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bytedance-js-jdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83368a66afbbabd7ac6793976de57a7056b3950ef8a54688009fa1c2a9d635d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-container-registry-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c820a88f96c37f80c1cd31ff7a8e16c0569322dff2c335469633c7614fcad195 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dozuki/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4f17bfdd5096b4afec10f9f6815a4afc22a2c47896ab05c7573ead3262c5847 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2020-4606

creationtimestamp| type| source ---|---|--- 2021-01-08 18:42:05+00:00| seen| https://t.me/cibsecurity/21833...

Code Injection in ionicabizau/git-stats

Overview git-stats is a js package for local git statistics including GitHub-like contributions calendars. Affected versions of this package are vulnerable to Command Injection. It is possible to inject arbitrary commands by using a semicolon char in any of the options.start or options.end values...

Exxxxxxxxxxxxxx Directory Traversal Vulnerability

exxxxxxxxxxxxxx is a JavaScript-based package. A directory traversal vulnerability exists in exxxxxxxxxxxx. An attacker can exploit this vulnerability by placing a '. /' sequence in a URL to gain access to the file system...

Malicious JavaScript Package Detection

Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...