Malicious code in ecpfs-react-jest-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 32b1e08557df6041c33ac4eaf0ebb0a3cdbc1bebeeb27b97321516cd0772898a The OpenSSF Package Analysis project identified 'ecpfs-react-jest-helpers' @ 2.0.1-v1 npm as malicious. It is considered malicious because: - Th...

MAL-2025-25 Malicious code in ecpfs-react-jest-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 32b1e08557df6041c33ac4eaf0ebb0a3cdbc1bebeeb27b97321516cd0772898a The OpenSSF Package Analysis project identified 'ecpfs-react-jest-helpers' @ 2.0.1-v1 npm as malicious. It is considered malicious because: - Th...

Malicious code in marketing-jest-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab6ca86b3958ca21a43d81429cfad45bf1ded2515bc8fafc3307885ed2f6b869 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ts-jest-starter-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c8f8d1bb529584dca1e5c310895c30958385530f5241f3a8a364caffb33347f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9278 Malicious code in ts-jest-starter-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c8f8d1bb529584dca1e5c310895c30958385530f5241f3a8a364caffb33347f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8075 Malicious code in jest-preset-halo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfc2dc8d28922810c8762769169e159199afd36350a743770e0088d5c54efbd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jest-preset-halo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfc2dc8d28922810c8762769169e159199afd36350a743770e0088d5c54efbd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: Vulnerability in nodejs decode-uri-component affect Cloud Pak System[CVE-2022-38900]

Summary Vulnerability in nodejs decode-uri-component affect Cloud Pak SystemCVE-2022-38900. Cloud Pak System has addressed this vulnerability. Vulnerability Details CVEID:CVE-2022-38900 DESCRIPTION: decode-uri-component is vulnerable to a denial of service, caused by improper input validation by...

MAL-2024-2541 Malicious code in @realty-front/jest-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in lwc-jest-serializer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c88fb0df21e3f633176d1aa6411b5fa4bb5175518fe00ea39ededf35bf8823de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-75 Malicious code in lwc-jest-serializer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c88fb0df21e3f633176d1aa6411b5fa4bb5175518fe00ea39ededf35bf8823de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8470 Malicious code in jest-coverage-report-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a570942cc8be879311bbb1b601f658554c30fa3734aacac08c1c53289da55bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jest-cucumber-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e2fbf023b3a861ceda4ee89f2c188d2cf7e1b274a07fb7f0df58b9d86c6935b2 The OpenSSF Package Analysis project identified 'jest-cucumber-reporter' @ 0.0.9 npm as malicious. It is considered malicious because: - The...

MAL-2023-1218 Malicious code in jest-cucumber-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e2fbf023b3a861ceda4ee89f2c188d2cf7e1b274a07fb7f0df58b9d86c6935b2 The OpenSSF Package Analysis project identified 'jest-cucumber-reporter' @ 0.0.9 npm as malicious. It is considered malicious because: - The...

CVE-2023-38695

cypress-image-snapshot shows visual regressions in Cypress with jest-image-snapshot. Prior to version 8.0.2, it's possible for a user to pass a relative file path for the snapshot name and reach outside of the project directory into the machine running the test. This issue has been patched in...

CVE-2023-38695 cypress-image-snapshot vulnerable to insecure snapshot file names

cypress-image-snapshot shows visual regressions in Cypress with jest-image-snapshot. Prior to version 8.0.2, it's possible for a user to pass a relative file path for the snapshot name and reach outside of the project directory into the machine running the test. This issue has been patched in...

CVE-2023-38695 cypress-image-snapshot vulnerable to insecure snapshot file names

cypress-image-snapshot shows visual regressions in Cypress with jest-image-snapshot. Prior to version 8.0.2, it's possible for a user to pass a relative file path for the snapshot name and reach outside of the project directory into the machine running the test. This issue has been patched in...

Malicious Package

Overview @realty-front/jest-utils is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious code in uw-demo-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc077db22ec20e2ce69410dd2e6fd0eded897e94ddc25239639a9eb47ff7e9ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vue2-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62db5053baa95205597fb360a30527d38f6a2e9f7feb1212df5b002747fa62a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...