MAL-2024-11046 Malicious code in journey-client-reactor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a98ffaef8416f200477aa23d38714df4c260dc31fe05c31d6edc8312f1a1c6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-5921

An insufficient certification validation issue in the Palo Alto Networks GlobalProtect app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root...

CVE-2024-5921

CVE-2024-5921 : Palo Alto Networks GlobalProtect app suffers from insufficient certificate validation, allowing the client to connect to arbitrary servers. This can enable a local non-admin user or an attacker on the same subnet to install malicious root certificates and subsequently execute malw...

MAL-2024-11050 Malicious code in listing-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4ea27f5a6df8c18c232526671a1de97c661c9a30766e9a72b8fd317bfb3804b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11072 Malicious code in react-dnd11-html5-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea03ab2ef2fe66b3466f7832df60c5d0a36e6201648923570b06a14af396a694 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11067 Malicious code in pfms-feedback (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1421630b6d73de6a5bb1e9a21167b6334a1e1f630a2734a5418c33a45c178737 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11027 Malicious code in ads-common-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 293ac90d50dec59b81bca66b9d0a5d8c0cda050590e84031f86b85671cdcc494 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11038 Malicious code in fe-prometheus-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 985893f86a88110b578b46b480afeeea3cece69b7d81e7ce6c54a5bb36d54ed7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11075 Malicious code in release-notice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9188a12e63756142475c425c675afc5c47d67d58761c182bb785745a2b7298fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11107 Malicious code in streamserch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60f81de1812a170068a806d38067c032572690f06b8d48a8a439f994296f9d07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11064 Malicious code in parimiko (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e64b7fb9206021d0f09985a2fe99b4f9624528af147a443df789f63dac81951 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10996 Malicious code in qassam22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 702b000366b6c97d193893113b38978d35d7a5805d79623701fa92a7b4d54d68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10980 Malicious code in internallib_v605 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 475f2a81a117feeb57828a0b3a4f83fa7b1ef8ea775453479c98d169afa6fb42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11002 Malicious code in secure-fetch-utils-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c66dff7a321aed95e4731350eec61896cd1851d384cb7528dffa45045bbfcaf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10970 Malicious code in eslint-plugin-finance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd21cba796237ee635a3e8cfe55b14df360eb1cafcfdcf99c297d35f4ec2e77d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11021 Malicious code in yapi-plugin-games-google-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50fd58da7aed5c7f4b93b71f00b778b524976db87da82ad0c037d021e2197649 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10999 Malicious code in react-pro-components-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a506553d493492c9666be45b4f75b99c3f0a1df10d1c0f3d7296cca695b29787 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10975 Malicious code in fulfillment-portal-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae800e3a06eddead9c751afd78539dde2e601ffb792b69421bbf36d2a6f1d87e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in json-tree-preview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0892c74ee2d08c098ac37071b098b7b98d3d6e56f4ed823199117411d0538e4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11016 Malicious code in updsolara (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e410b129d4c49cfec588cf09b60d8c3b49cfbb031d79b712de9bab7cc3dcf6c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...