MAL-2024-7753 Malicious code in jfrog-jfconfig-grpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 177a2d1912b1051b4347d51ff6410db1077d40c3cd21468d673acef023e3e1da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7757 Malicious code in noblox-cores-ts (npm)

This package is considered malicious because it contains a heavily obfuscated postinstall.js script with multiple stages of payload execution, resulting in the delivery of QuasarRAT. This allows command and control by a malicious actor. --- -= Per source details. Do not edit below this line.=-...

libgit2 fails to verify SSH keys by default

...

MAL-2024-7736 Malicious code in crypto-ops (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1553fb7d7d1ca058c26337308435b8b0bd7cab9f04546e8c72e9799ebd4dda5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Rockwell Automation FactoryTalk System Services and Policy Manager

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.0 ATTENTION : Low attack complexity Vendor : Rockwell Automation Equipment : FactoryTalk System Services and Policy Manager Vulnerabilities : Improper Privilege Management 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...

MAL-2024-7715 Malicious code in komcay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad3ad3da1b41f64619c16ccbdcd725acffd6c557ba6029fe77287ddec8b6c886 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7714 Malicious code in komcaxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e16d460077fe5867d93cdb883add5647909a7ab4fd8fbd15016821bf60682b9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7722 Malicious code in tilda-date-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b98b7d3c762a3af730da420104e9016e9ca64e0313f7195afe1a8b29be029275 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7705 Malicious code in flammerxdjson (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8b6b80199d2f6500f4b47a77309fa995e34a633ea2fa5f5e265d0b1ffb7b085 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7717 Malicious code in stylecshert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd9222f2e9e0e525a219159b5ce16c4ff17fe52d2b7e31e284a8114c681e24a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stylesnox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 231ba61276a9baae8583e87d40a97b7ee4c4dff960555a6df856c57ed2adff0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7700 Malicious code in bootstar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67d05a4e5eb1e1c884d16a1850fa6161acc8d1de6203726a6cd4e1b16b7ecfe0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7701 Malicious code in bootstrapcloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f67dc77b28b090be63a2162c508d3a69afe89f50c88f5310aaac6b7a8ddc8ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bootstrapcloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f67dc77b28b090be63a2162c508d3a69afe89f50c88f5310aaac6b7a8ddc8ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7711 Malicious code in jqueryxxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fa56bed3cb6a5adca01b8c14e48b17a0c6d2807089f8bf5dbbd4e871a7684d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7702 Malicious code in cloudhost (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06d8e1813e9e9ae1dd5749ee815f32696a16d538138675ee92e5cd2272e6c870 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7724 Malicious code in xxxtesting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d38175f6a654132e1c7224f649de92984aa619a34361a3f36efe42eda4aed34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7703 Malicious code in cloudhosting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fd9189614a3cd0fc65b9d65a27777e9dbc65357ba23e9ce37e7b25bc7ebbf51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7709 Malicious code in footricon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3a9e4c087147ec189ee96be3f28e1623055157d0133c8e1562ba103b4cc39a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7708 Malicious code in fontwesome (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acc8178b860313a9afa65a0284791afe1f0a2b63d7dfa62a48686e7928b073e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...