Malicious code in boogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83f9e49440163b18b337fa96122781fd44b6c349e396e432063e3a52dfd82c12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kakakaaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2991891f4c0cf3c5ae8aaf5e7a2d3a6f78b976bb6d6173c729ba8d57d09aeefe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pcln-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c01beeea09face13152116078006990e0e79446fb127a823bfecc65e22cfbe7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fake_la (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6115a697edd681072d429283353ca14b8a082575473dd2edbf9145be9625bc48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-labservices-samples-js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f05ce8b63a03443529a170279a302b166b7edb3f226343b537eeaaf267fb898 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in media-server-embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe2194f7f7af27a6e37ef504b65dc6d2acef0181506af8e587227fad7b449f21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in custom-script-vanilla-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84fc81c2b96e23984a6c8521174966b25105451fd5b8110b6c6244423b0c8457 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in myhood (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d85df27a389a58e10e1e7eee81ba4f8d443ca23728c6bcd83898ee847709917e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in polaris-shopify-com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a5e8b3737a432554b0cb2bca6b65c444835689b711931cd76872db903f5817a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dependency-confusion-art-test2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e97039a56b87ce44acffa793c9c167d6d22b7044f784c8c3a6f2d634586eb8f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in twenty-eightteen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3dbe890d9dacbbfccc608b0a05cce4b62fd182ba2ba72edddb4d0e9aed2d037 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @serenityos/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 860522512ac1f1260a5979dc6e74f18950916a0870e4866d18ebb807d636d2ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @calcalist/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c68e28852749d6794e2db1ff5c0ba212747a7609d6bbf3ab1a07be0cd32bc43b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @8x8/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc5d4ca5e9ccd3f061be92ad29e866ad5fb064bdede70d2d38d75bc13f978673 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fmbscnszjpxgusz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d2c34dd3e2a72e58ad7ad50106b00e20aa61330bacc1698da97fdb8f5dde05f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in venzuella333 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9b579c5d20e026074c906ecd42c392f61c248695385900b87b8df7b16480b21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testapp00009 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fb396ef5f846069b4adb5738c3c1f69ea523ac3b4b516f1437304f6cdd35f69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

HPE Agentless Management Service 代码问题漏洞

HPE Agentless Management Service is an agentless management service from hpe HPE in the United States. A security vulnerability exists in the version of HPE Agentless Management Service for Windows that can be exploited locally by a user with elevated privileges to execute malware, which could...

DEBIAN-CVE-2021-43616

The npm ci command in npm 7.x and 8.x through 8.1.3 proceeds with an installation even if dependency information in package-lock.json differs from package.json. This behavior is inconsistent with the documentation, and makes it easier for attackers to install malware that was supposed to have bee...

UBUNTU-CVE-2021-43616

The npm ci command in npm 7.x and 8.x through 8.1.3 proceeds with an installation even if dependency information in package-lock.json differs from package.json. This behavior is inconsistent with the documentation, and makes it easier for attackers to install malware that was supposed to have bee...