Malicious code in goworker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc41b31c8374e8dfb0d1a61187a9224907fd3adc6b4988f7285c3ab45891a807 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @aoflmkt/is-desktop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e1efcaba98a4db72e85c952c1936c99152081de71c2732e8189d9ad65390116 The OpenSSF Package Analysis project identified '@aoflmkt/is-desktop' @ 100.100.106 npm as malicious. It is considered malicious because: - The...

Malicious code in okxweb3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fce54676410bc1cff0b9c8068f4b763ec72e75752bc5cb2ba565027d48dcc4fe The OpenSSF Package Analysis project identified 'okxweb3' @ 99.999.999 npm as malicious. It is considered malicious because: - The package...

Malicious code in @wf-ceo/react-test-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91f840b7f5327bc27f6d9d37a547419df230c1ff7fd68cca9b0753faf6759012 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tokenize-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bf2139d8e0c1fd0cc2a5999a43ea8e49dce3b4cfdc1945fab3c8f5160851e1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in adminconsole (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88480db379ccb5378aada30388162f00d8033acb86b62e8d2e490533646c4a4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uid2-publisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07aebc5dbf3b61ba90b2d709f5b43ce5a08f773e0eff9ec55029e2c0ea5c027e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-50372

A CWE-78 "Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G = 1.6.3, EKI-6333AC-2GD = v1.6.3 and EKI-6333AC-1GPO = v1.2.1. The vulnerability can be exploited by remote...

PandasAI Command Injection Vulnerability

PandasAI is a data processing application that combines Pandas, a data manipulation and analysis library, with AI, allowing users to interact with data through natural language without having to write complex code. PandasAI has a command injection vulnerability that can be exploited by an attacke...

Malicious code in nylas-private-fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ee1ef8c0550ca23a398f277c0c95ff8234e2cfe0131ba08cfa0d0c2c327aa43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nylas-private-sounds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 612de4025068333f24bd17ea9b89669c891d1b53d78404a37c1dfaf655126501 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10880 Malicious code in maven-dependency-submission-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1381f1caf30bbc11135c6f4ffc6634a4cdeaaa63627d583675758c564c38c804 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tautoak4-hello-world (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f0a170170a102f43fd03d3b08bbcb53a572a5f48cde13250b3059ff3b332404a The OpenSSF Package Analysis project identified 'tautoak4-hello-world' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...

Malicious code in tautoake4-hello-world (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a5bbdacc63f269510ff88a76b84cae8deaa666d09fa9f9272c1463acfdff86e5 The OpenSSF Package Analysis project identified 'tautoake4-hello-world' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-10817 Malicious code in take3-hello-world (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c3ab74f2bd476e91c4d2e0d1cd29fa80dfb82df59eb0d48c4fd32e6fec28ef39 The OpenSSF Package Analysis project identified 'take3-hello-world' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in odin-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88fb389e44efcf715a97b223a3b5d1df5427225000fc86af2138b7bcb3934375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @freshworksinc/haxer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis de5ef35194af0d5cbffe32f426bd864775477d0ad6d618c146e07b2f974b577d The OpenSSF Package Analysis project identified '@freshworksinc/haxer' @ 1.3.7 npm as malicious. It is considered malicious because: - The packa...

Malicious code in refocus-sgt-trust1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85a58d6e895c9c66ecf3d14b36826200aba02fdf96987b6b7b619c6945dddbfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nordic-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d092883ffa5f152a8f2a83ea9b516dc1228960983868316a9dd74fd197f6b43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aseemnpmk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4ea49246d59dff6f14c706b43c01a3cbda0e247126a5d67c6e91428922445f1e The OpenSSF Package Analysis project identified 'aseemnpmk' @ 99.99.90 npm as malicious. It is considered malicious because: - The package...