Design/Logic Flaw

Incorrect Default Permissions vulnerability in ABB e-Design allows attacker to install malicious software executing with SYSTEM permissions violating confidentiality, integrity, and availability of the target machine...

MAL-2022-7231 Malicious code in wormhole-icco (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad0e4f91c8527b42331c43875fd2101ac552b47ac0af2476a52586992154a6e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3849 Malicious code in insights-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6352a03d6b7118bd6118e06e5a8aec38658ea60ba7ea57fff1425e26eef97b5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6067 Malicious code in sg-dome (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 100290dc9fe774ec3666aaf8b46114c588901ac78d03a51b506faa31a736ba58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-58 Malicious code in @adam_baldwin/pingback (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f588b73737abec3fff361bbdc2e62cf8bd2969cbff8e191ce69b6bb349dfbcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-60 Malicious code in @adam_baldwin/tag-tmp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f211f37484306b90ab81d936a2241de4d32e3b4250fb10a75c72425ff75585aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2429 Malicious code in depedence-confusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dc8878b8a028e2ab59027e85e1baf0c886fe76a9803d73594baff2df1359a94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pocjenkircetest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebbf04e7a39de82685b8e0cb1fc6ad03deb085f0db3630624a3b736b99d0a7f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-29483 e-Design - Multiple vulnerabilities

Incorrect Default Permissions vulnerability in ABB e-Design allows attacker to install malicious software executing with SYSTEM permissions violating confidentiality, integrity, and availability of the target machine...

CVE-2022-28702 e-Design - Multiple vulnerabilities

Incorrect Default Permissions vulnerability in ABB e-Design allows attacker to install malicious software executing with SYSTEM permissions violating confidentiality, integrity, and availability of the target machine...

Malicious code in sixt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db59f1b325dca20e6aa112d88e03b0238a9e4b026480cd4c74b766991cbc5ade Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6330 Malicious code in stripe-connect-rocketrides (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e97a2c94dcfd44ffb0f5732e910f9abf4e1c2e2d188c646dfb13cb8fd1c4eef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1685 Malicious code in brlc-token (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d7212ac759445a19263a1bc31ab713414359f0ce212665d53b2b150651a7b34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4564 Malicious code in mes-bah (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 711fc50ffab5cdf3d8c553d2254216d5eb19a0fce4139d63949183ab0fd8527c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1085 Malicious code in argo-hosting-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68219d5583bb3d47838918ac2c62f7ada7453a8cedfe80637c05a53b728a2707 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6362 Malicious code in survey-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2112bbae1e65790567a0ca80131bd2fef3b3ba74e669e0dcbc8f409d3291fff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6645 Malicious code in trezor-translations-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d268d84dd223392a574ca54de1d0ddc5b49977e3ac246d2d4917ff9fc24aff3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6646 Malicious code in trezor-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6988db5be258f1aa0def05723411080dc261386d487115e474c4ba25b71d09e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6210 Malicious code in some-crazy-dep-that-doesnt-exist (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bba7898448e8d4f73d570414401ad6087f1975f5929f72e38815a6bf95c28103 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2017 Malicious code in colors-rgb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 072b4a8d033d3e9f88fb91aecb273d4e607330d0cea85ed494344c0f396b53a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...