@automattic/jetpack-ai-client (>=0.1.5, <=0.16.1), @automattic/jetpack-components (>=0.41.2, <=0.56.0) +45 more potentially affected by CVE-2024-21489 via uplot (>=1.1.2, <=1.6.30)

uplot NPM version =1.1.2, =0.1.5, =0.41.2, =0.29.8, =0.11.2, =5.0.1-beta.0, =1.0.0, =0.0.2, =8.3.0-beta.1, =10.2.0-nightly.0238db42, =0.0.1-beta.4, =0.8.0, =0.0.1-preview1, =0.1.10, =0.14.0 and more Source cves: CVE-2024-21489 Source advisory: MEND:CVE-2024-21489...

MAL-2022-4023 Malicious code in jetpack-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3790839f558d5d8b1639eb4af1dfcd0f8b856942399dfdc273a8c1e95676cbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in jetpack-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in jetpack-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3790839f558d5d8b1639eb4af1dfcd0f8b856942399dfdc273a8c1e95676cbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...