MAL-2024-8920 Malicious code in princedecmtest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4296eec1561c67a70a133ca49c6fd90770377927551f2da264742ef8d3cf3a5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8916 Malicious code in dmn-editor-envelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cea2a6739abd5713f936e329c35aab9e44e6296aa0998b622c48217a3c1fbd50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8917 Malicious code in ibm-strings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d299d0b8d9bf7cc9c318e385566c4f1c9c972374224f38ac12d8fb90612dbdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8918 Malicious code in mfp-config-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f798a6fe7590d0ef3066f87c5397720bbb22a579e8355e0893963a212454df4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kk4845.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38684730b01368b7ae01946765e8bb76b27127d47d68019c175e498d92f577fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8907 Malicious code in trjhasd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 503e0e46dcc93da1eb303cb9bbab8553340c3c982ec1f1f52ee4d5246afd326d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8904 Malicious code in rokihfds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fad727b92f69c33ce99be8084a48ca2fcbbee267db6893b3bcd1a875612cf94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8909 Malicious code in zama.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c7d24b4c936b1a7db36389a502d16c849f6f10f3c0b23614910119088d0cd60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8903 Malicious code in rnjnioep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d4b28e75016946748cc0f573ed6ef13f6ba19871339cae87de357a7ceba6e6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8892 Malicious code in insidepocpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9343c28a95e2648fa7fe9046f3451fb694d2cdcb1d27391169b501505b454a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8894 Malicious code in stripe-testfb-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cd65a10f0ebad6ff909e45ebb515898fc48e522018ebf68f4290dc40ad6d1d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8889 Malicious code in ably-engineering (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ea2f9c81a90e54e316c75ace4b265b7eea50ab7c006fdaaa6084411adebb4d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8890 Malicious code in ably-sales-demo-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1329a9a4ad55c5ef0230b58a21648b4425bbde53212764b02bffcd44be07648f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8891 Malicious code in eslint-plugin-xp-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10d7d633334fcc8ab953c0b2e6d92181eccf3a812bcca44f7fb42ea0e9da57f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8893 Malicious code in latam-xp-analytics-plugin-bloomreach (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46687ff096af514b5081dc4a34a83f209ca1ad61f07606c88537ffc54f3054ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-7389 · Unknown +1 · Matrix-Js-Sdk +1

Name of the Vulnerable Software and Affected Versions: matrix-js-sdk versions 9.11.0 through 34.7.0 Description: The issue is related to the MatrixClient.sendSharedHistoryKeys method in the matrix-js-sdk, which is vulnerable to interception by malicious homeservers. This method is used to share...

MAL-2024-8879 Malicious code in halifax (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58b7d4d1c1a8e8e2720f2b6394db65819f21bc67f442635e470d6fecaa349545 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8877 Malicious code in afe-host-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d80291bc2fb747c24552e0b6b0ca98fd26e244004fe5a804870a1be5e54a4e0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DockerSpy - DockerSpy Searches For Images On Docker Hub And Extracts Sensitive Information Such As Authentication Secrets, Private Keys, And More

DockerSpy searches for images on Docker Hub and extracts sensitive information such as authentication secrets, private keys, and more. What is Docker? Docker is an open-source platform that automates the deployment, scaling, and management of applications using containerization technology...

CVE-2024-8775

A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. This occurs when using tasks such as includevars to load vaulted variables without setting the nolog: true parameter, resulting in sensitive data...