MAL-2024-7981 Malicious code in react-bs4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78bc438299611b89dd8a16ca1b19661e9606898bbc7c61bebd4bfd59fe8c3134 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7978 Malicious code in onboarding-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf0eeb8331dee0a51811bb425579a846641a464fecc8c6807dc0d270e7048a3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7943 Malicious code in coralui-support-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f192dd56f8538e6386f8ed29a314e1235df475bdb9630e5ec4b48b7bb8378fd9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7962 Malicious code in incisive_testing_stuffasdasdasd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdb1bfbec781368ae80887d0cfbf5274c13f6e71f0f1c93de027875714a9f1c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7997 Malicious code in trips-pwa-localization (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2711cf5153838983e0237668dc1baaa1ad85959278de51e6e06702482099b582 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7914 Malicious code in @egds-tools/types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7b0af86a685aa067cf44a53a4561296c06e2887a10d74dcf4c5e86d0f177c0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7913 Malicious code in @cdc-internal/mkt-nav-footer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03f66f3f203cc6f24d8cb93220716582b3379ca1cfb4478f470c4317051b7407 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7912 Malicious code in @bybit-fe/bitd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5077b0e3b0405cb1364268fcb890393fb22d8c31261cdd25f310d0e6e82c5a51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7910 Malicious code in @ampol/design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7583d639bf7d61499f7cac9da21bc3a507a7af5a21d6ee198303de1e0383f009 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8007 Malicious code in woodiorers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2de2a81c56e9d9bb341fdfe18ba291124542c69c9831f6ddd857791696c538ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7998 Malicious code in uewopdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 840acd749ca1cc60804a43acffb1a61e836448f4ac5759d429f3268dcdd2a512 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7966 Malicious code in jiworis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1123aec6d4dbdee29f1bb9f2914d16f0b88719c53d3533bd102bd17153693e6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7956 Malicious code in fieorusls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 368b270086b0df625cfccd2dc2249b032f6dd8a269b1948fffd65dccf042bcb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8008 Malicious code in yuriosid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1797849b8d6791e2dbf86f150f160140b8625b0a658a218f594253ce161dcad7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7992 Malicious code in teiwosjd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6603e4eb0efabf2f58234dae83f6477feb78b02fddfe5b3e0ce6988adaee2df9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7961 Malicious code in hioesjri (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62e448f6dfa1e36df6dac9355caaf3a0111d0a7c155b08d8add69b3f9bf8c29d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7977 Malicious code in nioskdue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1c6a02b9e69d61396fbb608cc60e0158aee28b987cb4b4b447a27f1a7bca70a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-42062

CloudStack account-users by default use username and password based authentication for API and UI access. Account-users can generate and register randomised API and secret keys and use them for the purpose of API-based automation and integrations. Due to an access permission validation issue that...

CVE-2024-42062

CVE-2024-42062 (Apache CloudStack) : A permission validation flaw in CloudStack 4.10.0–4.19.1.0 lets domain-admins query all account-user API/secret keys, including those of root admins. An attacker with domain-admin access can leverage this to gain root-admin and other privileges, potentially co...

CVE-2024-42062 Apache CloudStack: User Key Exposure to Domain Admins

CloudStack account-users by default use username and password based authentication for API and UI access. Account-users can generate and register randomised API and secret keys and use them for the purpose of API-based automation and integrations. Due to an access permission validation issue that...