MAL-2022-3903 Malicious code in internallib_v678 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fad5eff255e4aa8537a898867d022aa72241f3cc26872cb77e10c6c3c1b412ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3897 Malicious code in internallib_v340 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43570bd043aa581a3eeb3e0fa059e89cbdd9eb7be6e3e3c531c90f5d71dca94b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6536 Malicious code in tetstetegg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 487d0ce2492eb69c769913d8e9b912be506bbbf5a8e07362a711257ff73c7a31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1491 Malicious code in beaker-virtual-fs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9674b3ee0c5cba399e69bd052fac29981c040d40efc01382f69c614c3d8a563f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6655 Malicious code in troy-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa7b7e93170b23a3db32c4befa01c8c7042f92359e4c4fd2e156981a34ceb968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2970 Malicious code in faust-nx-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a13a7f17aa394d9547f5e79e53347c4a9c43f05d6e49941d23526b430482b69a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2424 Malicious code in dep-incompatible (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb537c14147bd009ef50b49f0aa9e6c60e693c01b44667d8b8ce0e9a295fbbe8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2642 Malicious code in e2e-test-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6572edea50875b7a4383ee4b7dbed53e89120ed815f6699c7033f43c636fc189 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2914 Malicious code in example-yarn-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49ed18b898074c0e0df3d8de17008d5edd7e275455865ce1592b1b4bcc76ccd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5784 Malicious code in rhyselsmore-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9191b8e959dc9d479143d6869bd70775fc54d00fdf83983ccd97520145eb2ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7245 Malicious code in wvvbch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cf85aea835d80198c06087cf0bd4dfe448415bd394e75bd3a2709ba66193bcf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2553 Malicious code in docusaurus-plugin-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 232063f9bf78828e30e0c8bb7374c02a90b0a6bf29118093c955b5412deadddf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6974 Malicious code in vscode-clangd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3e05ac1fabef54ef34176e9d555cb6e63b3dfbc2241cf304ab6a1b8b3cd2cc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-372 Malicious code in @jr0ch17/rce-jr0ch17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85f8d83abb7f1cf3987b602bf20ceb0dc6d03fcbee9352056b0b09560b177298 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6484 Malicious code in test-npm-mal-kfir (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25bef1b3246ec515e4d0f6cd7804a562a6cf0a92fec08fec3fe0b5b35dab1b87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-23177

An improper link resolution flaw while extracting an archive can lead to changing the access control list ACL of the target of the link. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker may use this flaw...

MAL-2022-7253 Malicious code in www.etherscan.com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51950d907fe18534fb3fc9aa8c8f7d2ed0ef897cb2b6f67968514bf8ebc4e05b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6198 Malicious code in social-media-icons-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca362d17a667da1d094b044be149065c8d362cc8ae8e0dbd43bfdb0e9c537df7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3828 Malicious code in ing-lib-ow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f1863fa8831f8f5abdfbce623f2b8110c0676473d1611573bacf1d0a4d5f5ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3209 Malicious code in freekws-devportal-api-client-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 964e73152194b8926217ca3e0d90526fe2a0e1223ef4b99a45ebd367193ce1fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...