Malicious code in seller-address-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44a834432bdf9ff097e4782377642977bcec11de6a1529a1d20a87a65ac5c44e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-3379

In lunary-ai/lunary versions 1.2.2 through 1.2.6, an incorrect authorization vulnerability allows unprivileged users to re-generate the private key for projects they do not have access to. Specifically, a user with a 'Member' role can issue a request to regenerate the private key of a project...

MAL-2024-10698 Malicious code in commitlint-config-jira-type-infra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3a60114c639e9e20430efd4c98505d38340a52eece4ea1eb6eca3117556cc63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10693 Malicious code in axios-older (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1047fb8be55bb9b1906e2bc7b0b46f5194ebb21fe15d16f8c194ddcd95083bdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10700 Malicious code in h20-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72f919b25a0e7333704e4c71c06150db40d66dfbb43786f6fece3fa6b1055141 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10702 Malicious code in htp2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2f646abc54192dce6f7771d42de7321b233e28eec8e74a93f3d6ba8bfff37ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10707 Malicious code in p-http (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e6020c72434d3e7647714902b693a6b7724105d815480ccd6ea906112b33e23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10696 Malicious code in basicath (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c0a0a0749c1ad1f82f0475d065d5bace6e04151bc7daea6f1596d383a707c4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10705 Malicious code in nod-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a1f4fa08a391ae008c71e6e7702d9ede5e8c5c147a62bf4409fe2df50a83ae9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

golang-fips: Golang FIPS zeroed buffer

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...

MAL-2024-10685 Malicious code in tunnelagnt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f592f3817d29f7eb7e8b935a808bc3bad4ac50bd013cca91c31cc5de22866cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10682 Malicious code in proxyagnt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f00c4785fc05575aa8761c65207ad5a96beeb5bcb2eb2073f1866788c9de6130 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10679 Malicious code in graphql-yga (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f47f947ce34d135841426d54dbd431fafee589316d101ac561f402d69ff75316 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10681 Malicious code in pasportt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd40a87fc63f541713d987c4b12787ff5dc7f3354a807076862b42c86d677a74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10678 Malicious code in chrtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51d0701ce2a2f37d64ab5cabf7620f130ffa8499080bfa3c3bb7b94cdd289b8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Denial Of Service (DoS)

github.com/consensys/gnark is vulnerable to a Denial of Service DoS. The vulnerability is due to improper memory allocation handling during the deserialization of Groth16 verification keys, allowing attackers to trigger excessive memory allocation, leading to high memory consumption and potential...

MAL-2024-10684 Malicious code in styledcomps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0b781ebb0b45a144ec6fcef9fc79b3304f5420286bc6d38b2a73a0c21830194 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10683 Malicious code in sazz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d92dbc3fe418eda55594a9daf2e211b0d4595e4d8eaa8559e9c430e20995eed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10680 Malicious code in litecor-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8de5087944e5861aed99f90c521ee559657882af3f3048fa1bae6415906160b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-internal-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1777e495156cf7146557c4b12278bbf9af5efe01c047f211bda8e66eb5503f8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...