MAL-2024-11008 Malicious code in ssc-ui-vue-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 884882e2eb31bfc360a8f498a02cc4a1ff310a8f37182b3613b74c029a8f5234 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10987 Malicious code in monorepo-release-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c63f18eff64dcaa5004e544abedb75ecf27b8fe4bd6cc8efecccf449ee5bea4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11000 Malicious code in refocus-logging (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25782f8156daaa99c83887bef8d34ff68e86c7c3c2c64313bd4ebdef950356f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10992 Malicious code in onboarding-ops (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6407e18f5ffaba9b33a89b526c75f2752e724200fda34ccb433db01957a188f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11018 Malicious code in web_enhance_sap-stable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1166fb5c2d52c1441f6a01e18fa740ebce1a9f89427d2f5211a45eeadba3cb88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11013 Malicious code in tracking-wtf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f6c419e01391037aa9cad91f15a45a36a535cf2a7cee66dfe6a8814f2da5eec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10983 Malicious code in json-tree-preview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0892c74ee2d08c098ac37071b098b7b98d3d6e56f4ed823199117411d0538e4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11015 Malicious code in updasolara (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5019b6bb5f610407cab79430a7c13fe5f715daf02b6629d8945a69755c0fea5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11016 Malicious code in updsolara (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e410b129d4c49cfec588cf09b60d8c3b49cfbb031d79b712de9bab7cc3dcf6c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11010 Malicious code in string-process-mate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2df355e26d748442b2bef75aff72f4bc8a791379093da56fffb1f7b7d9336ecd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Devolutions XTS.NET 安全漏洞

Devolutions XTS.NET is a pure C implementation of the XTS encryption model from Devolutions Canada, primarily used for disk encryption. A security vulnerability exists in Devolutions XTS.NET version 2024.11.19 and earlier versions that stems from the use of non-constant time encryption operations...

MAL-2024-10951 Malicious code in babel-plugin-error-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7744d02644a699ae9c3fbb5c30c579ba65b94f7771206aa8c11b450ab048076f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-36248

API keys for some cloud services are hardcoded in the "main" binary. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under References...

CVE-2024-36248

CVE-2024-36248 affects Sharp MFPs and related devices, where API keys for cloud services are hardcoded in the main binary. This root cause can enable exposure or misuse of cloud credentials by anyone gaining access to the device, potentially allowing unauthorized external access or data exposure ...

CVE-2024-36248

API keys for some cloud services are hardcoded in the "main" binary. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under References...

CVE-2024-36248

API keys for some cloud services are hardcoded in the "main" binary. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under References...

MAL-2024-10959 Malicious code in debugr1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d8da47712ca04d79a2bec26869c777f7581be1aeb31aeacf3d22c37fdc27ce6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10955 Malicious code in commitlint-plugin-rules-an (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c03c634d44275626fafed374fe4584c0eb7ad65b4962926f8cdf2a8baf76dfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10954 Malicious code in commitlint-plugin-marketing-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e40a92c14d0b0d561bab0beb5da5e3d3dfb66d329e8b0ff2100fb7a8a87468b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10958 Malicious code in cs-shared-component-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b7b8d8fe1019a5e94c13232a7501bb7dc77b9f34c4b2c02354edfc3ab84d27f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...