Malicious code in brock-fetch-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06927b0ede8157ec71afd11ae6cacba244b713b63cfb70e6a5ae52949cdfc78b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in piwik-pro-angular-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79068cbf8199cbc4c530a577a4934b5e4c0fa657f5c84ef801c777fd77150c36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mrg-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98790b51597ec490351af9018c107bea0bdce270bb99f317b5d4a2f45b8ddf7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grand-whitelisted-hashes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0376424aef04154e0957721651e9e4066a8869bdcd687406f4984bc25c18f4e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @kindredext/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ff44be5274176abe0775cabee2904382a4f9c997bfc3fa8ad501fa74e65f1c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @espn/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c01b035156efe98723a341a81abfefda64ddf596c8456ae829ca3371eed8ba9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @cirrusinsight/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 359f73ce668f1e232c5f0615e7425ccddbf63c6d7f7932a2d870b3ae3de86ed3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in megaman-007mega (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67626cbbe1769b008622f389b3a828d6e88e95722c331847fc320ad45807fd19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in theme-whale-light (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c40def8d41c4b7ebb0169b850854b2a3cbdbd547e0e5e4ab2294ecf310c1b471 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Microsoft App Installer, related to bypassing authentication through spoofing, allows attackers to carry out spoofing attacks.

The vulnerability of the Microsoft App Installer relates to the bypassing of authentication processes through spoofing. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks using a specially created malware package...

OpenWrt Resource Management Error Vulnerability

OpenWrt is a Linux operating system for embedded devices. A security vulnerability exists in libuci in OpenWrt versions prior to 18.06.9 and 19.x series versions prior to 19.07.5, which stems from the possibility of encountering the use of a malware package name after using free. This is related ...

The vulnerability of the “go get” command implementation in the Go programming language allows a perpetrator to execute arbitrary code.

The vulnerability of the “go get” command in the Go programming language is related to insufficient validation of input data insufficient checking of the import path when using the “-u” flag. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially create...

Malicious Package

Overview asset-symlink is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using asset-symlink...

Malicious Package

Overview fluent-plugin-haproxy-stats is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...

Malicious Package

Overview cinchlogsearch is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using cinchlogsear...

The vulnerability of the implementation of the syntactic analyzer („parser“) for HTTP packets by the LIVE555 RTSP server lies in the stack buffer overflow issue, which allows an attacker to execute arbitrary code.

The vulnerability of the HTTP packet syntax analyzer “parser” implemented by the LIVE555 RTSP server is related to an error that causes stack buffer overflow. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created malware package...