734 matches found
Malicious code in tchap-translations (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ca575a89e5cfe2c388f248f9084e97b9cc385753de105d2ada5dc6323d1de06f The OpenSSF Package Analysis project identified 'tchap-translations' @ 9.9.10 npm as malicious. It is considered malicious because: - The packag...
Malicious code in region-selector-content (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ff0393e9f3a6a405065088df076729bb9436bdad64329c0f3eb1dfd8a5ad6638 The OpenSSF Package Analysis project identified 'region-selector-content' @ 99.3.0 npm as malicious. It is considered malicious because: - The...
MAL-2024-1136 Malicious code in region-selector-content (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ff0393e9f3a6a405065088df076729bb9436bdad64329c0f3eb1dfd8a5ad6638 The OpenSSF Package Analysis project identified 'region-selector-content' @ 99.3.0 npm as malicious. It is considered malicious because: - The...
MAL-2024-1110 Malicious code in abcotv-constants (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aecde97eb6bd30d0ab5c8787d1bd2f6d5fe38f5078d015135b8e267e5558b89e The OpenSSF Package Analysis project identified 'abcotv-constants' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in lyft-settings (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11c2890ec2321b818585ae36669c7c7b9b8b88d0b0b4c7b47679988a9908c569 The OpenSSF Package Analysis project identified 'lyft-settings' @ 5.9.1 pypi as malicious. It is considered malicious because: - The package...
RedCurl Cybercrime Group Abuses Windows PCA Tool for Corporate Espionage
The Russian-speaking cybercrime group called RedCurl is leveraging a legitimate Microsoft Windows component called the Program Compatibility Assistant PCA to execute malicious commands. "The Program Compatibility Assistant Service pcalua.exe is a Windows service designed to identify and address...
Malicious code in edgenuity (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15e4c93cf6c84b166ccde43c18dfbd4c3095f530bca0139dc5086f17c244adf2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @apics/apps-ppp-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a11545fc54b4d0cdd2e0e8de4ab835b254677aff86d325e9bec6a0a6b5e090a8 The OpenSSF Package Analysis project identified '@apics/apps-ppp-web' @ 9.39.1 npm as malicious. It is considered malicious because: - The packa...
Malicious code in analysis-tool-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab026f9cd9836e60e06d6f1449c82d1e5d26662722dfa2be764f46778eab3b39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in packages-analytic (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 970fc09fccad26ac5a8eb48041b00f5f843260c7c594cd0211198e2b191f82c0 The OpenSSF Package Analysis project identified 'packages-analytic' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in @ssr-frontend/packages-analytics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17a895de36109204be95b9aba4154cc6414897889ce21aed3bfa4f0a304b3453 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Untrusted Search Path
Yarn is vulnerable to Untrusted Search Path. The vulnerability is caused due to improper validation before constructing a file path within the validate method in child.js .This could allow an attacker to execute malicious commands in unexpected ways if the attacker tricks a user into executing...
GHSA-MPWJ-FCR6-X34C Yarn untrusted search path vulnerability
An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...
Yarn untrusted search path vulnerability
An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...
Design/Logic Flaw
An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...
UBUNTU-CVE-2021-4435
An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...
CVE-2021-4435 Yarn: untrusted search path
An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...
CVE-2021-4435
An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...
CVE-2021-4435
An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...
Malicious code in scrape-proxy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2530d758bc3aef746b755284c655b0848bae0ae234051ea312ceecf75b13636b The OpenSSF Package Analysis project identified 'scrape-proxy' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...