Malware in zoom-sdk-native-addon

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in zoom-sdk-native-addon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c46adede333f871f84adfafa02883ac6822b07a6f9e68d0b577ec5787d1f7d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

1664 (>=0.2.1, <=0.2.3), @aeternity/aepp-sdk (0.25.0-0.1.0) +272 more potentially affected by CVE-2022-25324 via bignum (>=0.4.1, <=0.13.1)

bignum NPM version =0.4.1, =0.2.1, =0.1.0, =2.0.0, =1.0.2, =0.0.1, =1.1.1, =0.4.3, =1.0.0, =0.5.0, =1.0.0, =0.0.2, =1.1.0 and more Source cves: CVE-2022-25324 Source advisory: OSV:GHSA-6429-3G3W-6MW5...

1664 (>=0.2.1, <=0.2.3), @aeternity/aepp-sdk (0.25.0-0.1.0) +272 more potentially affected by CVE-2022-25324 via bignum (>=0.4.1, <=0.13.1)

bignum NPM version =0.4.1, =0.2.1, =0.1.0, =2.0.0, =1.0.2, =0.0.1, =1.1.1, =0.4.3, =1.0.0, =0.5.0, =1.0.0, =0.0.2, =1.1.0 and more Source cves: CVE-2022-25324 Source advisory: SNYK:JS-BIGNUM-2388581...

3loc (>=0.1.0, <=0.4.0), 3scale (0.2.0) +362 more potentially affected by CVE-2022-21144 via libxmljs (>=0.4.1, <=0.19.7)

libxmljs NPM version =0.4.1, =0.1.0, =4.0.1, =0.0.5, =0.1.0, =1.0.0, =0.0.0-development, =0.0.3, =1.3.0, =6.3.4, =0.2.0, =1.0.3-wmf.0, =0.1.2, =1.1.3-alpha.0, =1.1.5-wmf.0 - @leonardodino/freshbooks 2.0.0 and more Source cves: CVE-2022-21144 Source advisory: SNYK:JS-LIBXMLJS-2348756...

[SECURITY] Fedora 19 Update: node-gyp-0.10.6-1.fc19

node-gyp is a cross-platform command-line tool written in Node.js for compi ling native addon modules for Node.js, which takes away the pain of dealing with the various differences in build platforms. It is the replacement to the node-w af program which is removed for node v0.8...

[SECURITY] Fedora 18 Update: node-gyp-0.10.6-1.fc18

node-gyp is a cross-platform command-line tool written in Node.js for compi ling native addon modules for Node.js, which takes away the pain of dealing with the various differences in build platforms. It is the replacement to the node-w af program which is removed for node v0.8...