MAL-2022-902 Malicious code in ai-image-tagging-lambda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec8ef7b0545eaa94432484debf73c757fbdcb6c21231a5a250f30afac3c5a8eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2435 Malicious code in dependency-submission-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 714cd15be545a128db2530153f5c28d6fecd32c664ddf24cfe8a0ac0cae65333 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-993 Malicious code in anchor-website-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 310732123214607507c810eb1c7f5e41532ef6717624fc015030b352daf9275f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2009 Malicious code in colors-2.2.2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2e9d4e592af561846333e6ba8b6ea0b44eaf7a158af7b1922d559e6ae3c1b5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2558 Malicious code in dolphin-database (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d93e1e2aae05851554793d8482112dfc1c9485368c8e532351decdfea864f7db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4489 Malicious code in matchmaking-mgmt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c910a63d38276abfbb266c3402f67f82df0091bd11ccffd6316793b44c5506a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in epic-ue-loading (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d044e670b4e25808611fceec6e531cf961c66589e41ffb8c8c4894a5b6c868b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2771 Malicious code in epic-ue-loading (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d044e670b4e25808611fceec6e531cf961c66589e41ffb8c8c4894a5b6c868b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dedicated-servers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35c4b788f6715525b4725cb43dfd6d9a25dc72435296cd802ed01fcb0ff2d968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5517 Malicious code in pug-web-readiness (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5a3a74c1c2aacf398fdb05e794db90e5375cf11705fc9cb04b5aa8c2944e403 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6638 Malicious code in treeing-cur-content (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b33ad1d54e404abd38b60c215f1efe0c827c6439ee2f223976f67ba655dd5bcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Design/Logic Flaw

A vulnerability exists in the http web interface where the web interface does not validate data in an HTTP header. This causes a possible HTTP response splitting, which if exploited could lead an attacker to channel down harmful code into the user’s web browser, such as to steal the session...

MAL-2022-21 Malicious code in 1inch.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2cc660bd230ed7799b68291cfc23fa0fe61c6267836ef9b126370995f1a7d5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4895 Malicious code in nodebb-theme-opera (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a769de2deb47651c7854cd9d1559f3a907a707f3cb60dcfd5aefb5af9d36a6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-174 Malicious code in @cobalt-team/multi-invite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e37ea81ad98e89c5f266cfa910ba2604c209fb890e8da13de13eb33951c1948e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-175 Malicious code in @cobalt-team/support-email (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4415fff565dfcd73b3d7b833cb710c1c434e9b840697cb99f753d7b69258c01a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5845 Malicious code in route-sonar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e7e8e14e7b5534cc30736a69538701a587fe3db0ac921df08e55a9c1e571fc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7205 Malicious code in wm-shared-consts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92dd52928f108691d1d01c6e868a6732508ac110b355d42ec67fcd2817ee676e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in defisaver-v3-contracts-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a28b89993098651b4f7a9310904718b5d27faeec078cecfdeefc1143bbc33a51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5391 Malicious code in pod-publishing-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0009f40b84012f59aa5423c3fc367190efbd389b30b848fc85bd2ddcd5a63611 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...