MAL-2024-1409 Malicious code in @juiggitea/aperiam-facilis-molestias-mollitia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 830ae116327023f82a97307586211b0744214fdad67a3897bfbe58f8e49b249b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1524 Malicious code in seller-journey-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 503e20152f64ee06b84916ab160644ed8a89c688c4562ec22c13d23732fb7b5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wdio-api-client (npm)

This package is considered malicious because it communicates with a domain associated with malicious activity and the package executes one or more commands associated with malicious behavior...

CVE-2024-1721

Improper Verification of Cryptographic Signature vulnerability in HYPR Passwordless on Windows allows Malicious Software Update.This issue affects HYPR Passwordless: before 9.1...

CVE-2024-1721

Improper Verification of Cryptographic Signature vulnerability in HYPR Passwordless on Windows allows Malicious Software Update.This issue affects HYPR Passwordless: before 9.1...

CVE-2024-1721

Improper Verification of Cryptographic Signature vulnerability in HYPR Passwordless on Windows allows Malicious Software Update.This issue affects HYPR Passwordless: before 9.1...

MAL-2024-1378 Malicious code in test_dependency_confusion12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b278ddd9e6c5237e992377e7fcac512039bf85125c688c1ad0dfad61caef8df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in brand-adidas-design-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e16fae72fd3726263d7bfa2f1c164b7d4100f89931856c163e37c534feb1a57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1356 Malicious code in fadam-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12fcfc7812a4dfc264dcd39b512b18975f587ef0aaf4a667af7a7bbcdbe6ef58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1347 Malicious code in ping-bot-reduction (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 605a96bff0b39813fe902ed7de4bfe3bf228835641c9d030cbec0a2a8b4f676b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1340 Malicious code in test-poc3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dd2e1b9551e2d05eb6769e870035396fbdd5bd09b3116b00901a73cb9e64859 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-7241

Privilege Escalation in WRSA.EXE in Webroot Antivirus 8.0.1X- 9.0.35.12 on Windows64 bit and 32 bit allows malicious software to abuse WRSA.EXE to delete arbitrary and protected files...

CVE-2023-7241 Webroot Antivirus COM-Hijacking LPE

Privilege Escalation in WRSA.EXE in Webroot Antivirus 8.0.1X- 9.0.35.12 on Windows64 bit and 32 bit allows malicious software to abuse WRSA.EXE to delete arbitrary and protected files...

CVE-2023-7241

CVE-2023-7241 affects Webroot Antivirus WRSA.EXE, with privilege escalation on Windows (64-bit and 32-bit) versions 8.0.1X through 9.0.35.12. The issue allows a malicious program to abuse WRSA.EXE to delete arbitrary and protected files, constituting local privilege escalation with high impact to...

Malicious code in actions-next-bundle-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a738c63046c2bd1588c1bcc21eafd03d28a480f73643ea8b429ff5fa00da78b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-3930

Name of the Vulnerable Software and Affected Versions Sparkle versions prior to 2.6.4 Description A security issue was found in Sparkle, where an attacker can replace an existing signed update with another payload, bypassing Sparkle’s EdDSA signing checks. This allows the attacker to potentially...

MAL-2024-1306 Malicious code in ethers-transactions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31d30dcd73ba06a4962c3e3b0419d5864aa9f93f1dcf516e1830eafa40f44ab7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1293 Malicious code in swift-docc-rendeeeeeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45e4d71b34d2eb0cd66dc9d19da997d325017d19687f304f39e1138fe0a0f0fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1265 Malicious code in viiiivek (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55cac2c796a655b4203b015952598ff85be425c2e7b0d0fd4ca5f15da45cb322 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1264 Malicious code in trip-component-platform-online-usp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6a881b5f34acb08b303ac7f027ae585053ffab51b72cfa79a2bb4b4cbdf3f55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...