MAL-2024-7466 Malicious code in rgmedia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be2aa20db2fb1090ab658d5da5b3494fc5f19c64a8552187d9c21a214179915f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rgmedia21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 149f0ec9d0ba73619432fb062c58b93fad9f52f3f97034e25a8354eeca346042 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7467 Malicious code in rgmedia21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 149f0ec9d0ba73619432fb062c58b93fad9f52f3f97034e25a8354eeca346042 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7441 Malicious code in dimaspedia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c763b10d1c1518d7a1b83655aa43d38243278e71daad1953955c08b1b93d095 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7455 Malicious code in kinthailxzz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 021efae6a0a979d3650baa0977615beea90731fdeccd547a0fc18af8402e16eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7457 Malicious code in kurxjy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd35d272c3dff6b054100efada55b4fa40fb7356dee1daa1235fd9bda23b871e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7463 Malicious code in pempers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e84fd41469e0d0e3a2aaa287b34bb91d95fc28a2c59c47a6cd0aff32881df06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7465 Malicious code in pepeksyep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bbaa8d67719f886c0be61ace2ebdf91371723088b13ededea349cc919fb875b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7471 Malicious code in stylesfoxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44fcbd703b193a7709b5a1f3865b979ed9f727900f5d3068e0ed65cedf5b385e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7474 Malicious code in stylesyosx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82d722f8097881f963d826e9354c183818bb986b8f99d3b93f6a764ddb7b65b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7450 Malicious code in icnes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac6c254b3ef9e5e73e3fbc6d2d90b42e3e7fbff7433a77cf3fc24425572a74c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7469 Malicious code in style-logo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 432922df618bfa7812ba563401c7e9006bf63962b0394d88412b57d859bd2eec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7440 Malicious code in ali-in-wlnd-test-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0d89d3dbaa5fb0db4821d7bddc99121add0aec27e506f275ad018fb0c0608af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7436 Malicious code in your-types-export-file (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c47fc8ae445df009de5ffc57a7e7a8a133c700db9f72c38f9c1ace0f66c562be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7433 Malicious code in action-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31baa3db4424164fa3d7884ba12d4c44fdfe3bc4db9eb835121b5adbeb9485db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7435 Malicious code in carousal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5390d19342c9cb8e78126b1968ed21b16cab8b998018d119687a7d27e9cde72b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7462 Malicious code in noblox-ts (npm)

This package is considered malicious because it contains a heavily obfuscated postinstall.js script with multiple stages of payload execution, resulting in the delivery of QuasarRAT. This allows command and control by a malicious actor. --- -= Per source details. Do not edit below this line.=-...

ZKTeco ZKBio CVSecurity Security Breach

ZKTeco ZKBio CVSecurity is a series of biometric solutions from the Chinese company ZKTeco. A security vulnerability exists in ZKTeco ZKBio CVSecurity version v6.1.1, which stems from the presence of hard-coded encryption keys...

Microsoft Windows BitLocker Security Vulnerability

Microsoft Windows BitLocker is a BitLocker by Microsoft Corporation USA Ensure secure backup of recovery keys before activating protection. A security vulnerability exists in Microsoft Windows BitLocker. An attacker exploiting this vulnerability could bypass certain features. The following produc...

CVE-2024-6580

The /n software IPWorks SSH library SFTPServer component can be induced to make unintended filesystem or network path requests when loading a SSH public key or certificate. To be exploitable, an application calling the SFTPServer component must grant user access without verifying the SSH public k...