MAL-2022-3013 Malicious code in fetch-string (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ae97c4c34e165dcc455869fbf2da4d3535aff6c425c2add9379cd2b8b9cfe7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6846 Malicious code in usaa-mocks-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72e333d9ff6919af4ebfaf50344d0a6450b553a28b0c1141c2d7a898866cce47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5683 Malicious code in react_popper_old (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e281af61adcbe405037f7cac58495892a35fb0370322dbe5db6b15825d8ce18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3278 Malicious code in gatsby-pancake-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90ceffb30b37291bb6ed204298f0beeb2f64c2ea30997c21d3c63501f9c1f5e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-902 Malicious code in ai-image-tagging-lambda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec8ef7b0545eaa94432484debf73c757fbdcb6c21231a5a250f30afac3c5a8eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2435 Malicious code in dependency-submission-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 714cd15be545a128db2530153f5c28d6fecd32c664ddf24cfe8a0ac0cae65333 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-993 Malicious code in anchor-website-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 310732123214607507c810eb1c7f5e41532ef6717624fc015030b352daf9275f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2009 Malicious code in colors-2.2.2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2e9d4e592af561846333e6ba8b6ea0b44eaf7a158af7b1922d559e6ae3c1b5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2558 Malicious code in dolphin-database (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d93e1e2aae05851554793d8482112dfc1c9485368c8e532351decdfea864f7db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4489 Malicious code in matchmaking-mgmt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c910a63d38276abfbb266c3402f67f82df0091bd11ccffd6316793b44c5506a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in epic-ue-loading (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d044e670b4e25808611fceec6e531cf961c66589e41ffb8c8c4894a5b6c868b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2771 Malicious code in epic-ue-loading (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d044e670b4e25808611fceec6e531cf961c66589e41ffb8c8c4894a5b6c868b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dedicated-servers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35c4b788f6715525b4725cb43dfd6d9a25dc72435296cd802ed01fcb0ff2d968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5517 Malicious code in pug-web-readiness (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5a3a74c1c2aacf398fdb05e794db90e5375cf11705fc9cb04b5aa8c2944e403 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6638 Malicious code in treeing-cur-content (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b33ad1d54e404abd38b60c215f1efe0c827c6439ee2f223976f67ba655dd5bcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Design/Logic Flaw

A vulnerability exists in the http web interface where the web interface does not validate data in an HTTP header. This causes a possible HTTP response splitting, which if exploited could lead an attacker to channel down harmful code into the user’s web browser, such as to steal the session...

MAL-2022-21 Malicious code in 1inch.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2cc660bd230ed7799b68291cfc23fa0fe61c6267836ef9b126370995f1a7d5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4895 Malicious code in nodebb-theme-opera (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a769de2deb47651c7854cd9d1559f3a907a707f3cb60dcfd5aefb5af9d36a6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-174 Malicious code in @cobalt-team/multi-invite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e37ea81ad98e89c5f266cfa910ba2604c209fb890e8da13de13eb33951c1948e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-175 Malicious code in @cobalt-team/support-email (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4415fff565dfcd73b3d7b833cb710c1c434e9b840697cb99f753d7b69258c01a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...