15428 matches found
MAL-2022-372 Malicious code in @jr0ch17/rce-jr0ch17 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85f8d83abb7f1cf3987b602bf20ceb0dc6d03fcbee9352056b0b09560b177298 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6484 Malicious code in test-npm-mal-kfir (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25bef1b3246ec515e4d0f6cd7804a562a6cf0a92fec08fec3fe0b5b35dab1b87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2021-23177
An improper link resolution flaw while extracting an archive can lead to changing the access control list ACL of the target of the link. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker may use this flaw...
MAL-2022-7253 Malicious code in www.etherscan.com (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51950d907fe18534fb3fc9aa8c8f7d2ed0ef897cb2b6f67968514bf8ebc4e05b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6198 Malicious code in social-media-icons-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca362d17a667da1d094b044be149065c8d362cc8ae8e0dbd43bfdb0e9c537df7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3828 Malicious code in ing-lib-ow (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f1863fa8831f8f5abdfbce623f2b8110c0676473d1611573bacf1d0a4d5f5ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3209 Malicious code in freekws-devportal-api-client-angular (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 964e73152194b8926217ca3e0d90526fe2a0e1223ef4b99a45ebd367193ce1fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6121 Malicious code in simontok (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware caa06374b63fc26ac5950bd03891861724e6b84eafeeea9a17277df2116b3392 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7356 Malicious code in yncrquest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c679ade1e8bd43c4605f3f7423c32e0ee111238f41709c75ceed3e7e278f9bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7062 Malicious code in weact-d5tepicker (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88191763d06079f123e8ea153e0e7e894484e9669039110460ac8f8c819a4ed7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2614 Malicious code in duplex-child-orocess (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d80c9a50168c6e1e994ec5162bc0269e152ff4c19a7341943ecde6cd1574a2ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6866 Malicious code in userhme (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1edaf1ffad475df785b4c7a21a164250e01372d1a97422147f703714fcb76c16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7099 Malicious code in webpack-3undle-analyr (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16a28366a4a6239f009a0f84d27a1ba4190b2a996fe943e1e342a7b8afce51f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7100 Malicious code in webpack-cil (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a60f6914f58bbdb3feffdb94d542f84c310b43a5ad07f7b980f8c3d0a1b47288 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7098 Malicious code in webn5ack (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96f1dbf84a0e38605909a5e13c55b006a88898d8cdfc1ac1229e153879cbc9a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6349 Malicious code in suorce-map (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0701cc6f6fa29d40dc09dd9424ce2419cb2621996a99965b425ffd32ca243985 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6767 Malicious code in ull-tream (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 462c89fd0b0463a6ef4ee5fb4a595a32f6f057bf765126ebddeba667abe06cf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6343 Malicious code in stylleint (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1518c0a8ed8b0583f27ace496234bda0a9303a6e53c33ab50948c5d086fa4ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6664 Malicious code in tsilnt (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81c67a52c89567fb6f0b1e76831b640bc8be1f4782536459007db02e54c538c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6348 Malicious code in suhallowexqual (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb8113ca42a9270860b494df28c6c9b8d72c09884f8e3b1548e85d9ba1dd2a5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...