MAL-2024-10986 Malicious code in malicious_sleep_package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99c56c5bd22f8ceb0fc4fb9fb6e616b108f88768dcd68a73feaaf4de3ea4ba2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10984 Malicious code in kraken-wallet-cryptoicons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5445e7a104fb812aa6f8ed5418680946ff853713215035b76d12e7bdd6a19300 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10958 Malicious code in cs-shared-component-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b7b8d8fe1019a5e94c13232a7501bb7dc77b9f34c4b2c02354edfc3ab84d27f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10977 Malicious code in hacker_for_pastebin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b86d3e7dd7e4513b7ffc80616aa25c0330b91d9af1cedcb8e8943ed7b12e364c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10957 Malicious code in crypt-research (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 488cc5e5910fdc7c554f6c3b87979d4abe9cd560a718f367505c58d4ffec25d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GlobalProtect App: Insufficient Certificate Validation Leads to Privilege Escalation

An insufficient certification validation issue in the Palo Alto Networks GlobalProtect app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root...

MAL-2024-10947 Malicious code in tetther (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0fe50db74634f51e1891c210282fbddafd5232a78124822bc40007cc286a7dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10944 Malicious code in tehter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9947da85637a8b657c770fb0b61ce650c78b0683fab7f45fe3c41a9c26ca6fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10940 Malicious code in nodmialer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f517fd7c243bbf2ebdbc660388ec85202c4ea31c094bc01cbb8b5ff4c0c7388f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crypto-puch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac46e66a58a4b83fff27b66b7372f575870fe1abb4ae286e8e1c46ba2109af19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10921 Malicious code in crypto-puch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac46e66a58a4b83fff27b66b7372f575870fe1abb4ae286e8e1c46ba2109af19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lunar-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe9a8b05cd878b17af9caf8b7741e3b99e737c24cce44b7e52942663d6f585ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Code Injection in Rejetto Http_File_Server

CVE-2024-23692-poc CVE-2024-23692 is a template injection vu...

Malicious code in uuid-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30f88a43630b6ef5d7da8f6ba0cda55412b61b9b682d32bae81951e545ce6915 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in npm-cli-release-please (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware feabb1bb20620ae160755e66696df9de9c058ba94e59b0cd910e81fa6a1829a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10768 Malicious code in polaris-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28f78c9a4b910eaa965460101ee58ef71fa917358a0c9e7a5be01ae875e152b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10694 Malicious code in babel-plugin-istanbul-shopee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b297d163ed50548e4f9a48bd5b04af57e58f063fa67d58480f857b63b9ee0bcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10695 Malicious code in babel-plugin-transform-vuex-analysis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 661cbd3eaaae7ee5bb113192279e6ba2e72c5c5363fe668209893a70debd3248 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10702 Malicious code in htp2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2f646abc54192dce6f7771d42de7321b233e28eec8e74a93f3d6ba8bfff37ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in http-long-poll-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c669e5a75045ddb01e4dfb851353acc909206109cf6fc41dbfca168a5b949216 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...