EulerOS 2.0 SP9 : c-ares (EulerOS-SA-2022-1959)

According to the versions of the c-ares package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A possible use-after-free and double-free in c-ares lib version 1.16.0 if aresdestroy is called prior to aresgetaddrinfo completing. This flaw...

Malicious Package

Overview vue-admin-lib is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview @spinak/iac-lib is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...

Malicious Package

Overview erc-20-lib is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview lib-admin-ui is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Debian DLA-3057-1 : request-tracker4 - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3057 advisory. - Best Practical Request Tracker RT 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2 allows sensitive information disclosure via a timing attack against...

MAL-2022-2296 Malicious code in cwpattern-lib-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a11073993604b52c3fb8ea34661d29f0b623df28896d64893a1705445c91e2e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in persona-verifier-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ca2cabdbd8835448cdeea37c5eac4287b21e737bbf4ba4e268b59bcc5468852 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5301 Malicious code in persona-verifier-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ca2cabdbd8835448cdeea37c5eac4287b21e737bbf4ba4e268b59bcc5468852 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3862 Malicious code in inter-frontend-lib-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 433e9627730a86227d62c3f4cce5d81e1971f4cd8b21df14bd1edcca861ecd2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tc-auth-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e722d89065a127384cb8d7ddb06f638b99851957d770f59e19f214e17ea122f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6426 Malicious code in tc-auth-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e722d89065a127384cb8d7ddb06f638b99851957d770f59e19f214e17ea122f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-733 Malicious code in @worki/lib-web-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17e4ceaa655b87bc15586889eff02972c889fb9215a6366492bb9b2adf20e51d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-732 Malicious code in @worki/lib-candidate-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86d9a79716c4b8a7405b2d945d61c5886439793cd3bf80e4f97ddf683d9c646e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mindtap-static-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4550bf7958beabc604b2e39198b933186e9f3694692faf653a68c474e740a7b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4597 Malicious code in mindtap-static-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4550bf7958beabc604b2e39198b933186e9f3694692faf653a68c474e740a7b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6715 Malicious code in typescript-dom-lib-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75be6711c73ad24a7b04bb490d8390cd6f717b03cc7fcf664e61ee0f52ffa48b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coding-with-chrome-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b39e454b8e21bbd82beb0349a1b0cbe9e230154865cfbd88b1b89ab33635fdd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5720 Malicious code in reddit-client-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6334d220686bbc61b76a7ebb42383b2aaba756c99ec547cdf39748884d32fd3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oz-select-lib2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc244268e31ff162335d149980a9cd27488d212971b485bfe356426e18ec7067 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...