MAL-2024-7369 Malicious code in @zitterorg/repellendus-ducimus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c107ede46e319fb0c1f9d0133b1cbe3e2d88caf4c286a24b84b913b5f0663ac6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7406 Malicious code in @zitterorg/vitae-blanditiis-eum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48b420353d221ffe6619647cc992a6592b7177f2ec41ad745160f363dee1ed71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7351 Malicious code in @zitterorg/quidem-et (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eba297499f95908de2b65999b0774985eda5d48ff2f4eaf0a6f6b3c4404b33d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7097 Malicious code in render-sample-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 531acbb1583ee41c2b1d689b07228870c585ff764c2fc902a93854b566181af0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7050 Malicious code in @freetime/core-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6e1ddad8237b58e27d13a7761696892692fb82793f5f7a7bd900c6397d96dbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1675 Malicious code in near-linkdrop-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ff40b77a91a8e45cd8e9541c0872d1e97a5e365768e2e6f34550d24f8c02fa0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1670 Malicious code in elitebots-prevnames-discord (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00d02d432c34e4cd053181ee1c3bd8e84aab59e198dacbfcfb8c88f184188c5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-5251

Name of the Vulnerable Software and Affected Versions Telegram for Android versions 10.14.4 and older Telegram for Android version 11.7.4 Description The issue is related to the incorrect handling of file extensions in received files, allowing an attacker to send malicious apps disguised as video...

MAL-2024-4911 Malicious code in colaroma (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4810 Malicious code in bip-utilos (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4658 Malicious code in Stl.Fusion.Ext.Services.Net (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4356 Malicious code in Bloсkсore.Features.MemoryPool (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in updated-tricks-v-bucks-generator-free_2023-wi0j (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in updated-tricks-v-bucks-generator-free_2023-gcb8f-ahk-pa65 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in load-secrets-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5c6df792d0b8b82b33553dca5481d1448b9b1b386d33e1cb5baca398cd76f5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-2522 Malicious code in instant-cash-app-money-generator-2023-code-jyerw (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1845 Malicious code in bullshittss (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1657 Malicious code in nodem0m (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae93a7345bbc51bd2c0a267dc582cf90302284606b0f569ae06f4dc6a26f801a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE-SU-2024:1486-2 Security update for cosign

This update for cosign fixes the following issues: - CVE-2024-29902: Fixed denial of service on host machine via remote image with a malicious attachments bsc1222835 - CVE-2024-29903: Fixed denial of service on host machine via malicious software artifacts bsc1222837 Other fixes: - Updated to 2.2...

Malicious code in rb-accordion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 435bf9e58c9f11fe55f80f865ec1f291beee55aaaf1ff78d0235dbf93b35202f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...