Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. An attacker using the npm account ehindero hijacked the @mastra npm organization and, in a roughly 30–45 minute burst starting around 01:12 UTC, republished the entire @mastra catalog. The Mastra source code was...

Malicious code in new-dependency-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 703949005820ff7aa3798c6cd80ec685d1e8d4dc3663fbe99fd4d402540c4c00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in new-dependency-test

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

OPENSUSE-SU-2019:0198-1 Security update for pspp, spread-sheet-widget

This update for pspp to version 1.2.0 fixes the following issues: Security issue fixed: - CVE-2018-20230: Fixed a heap-based buffer overflow in readbytesinternal function that could lead to denial-of-service bsc1120061. Other bug fixes and changes: - Add upstream patch to avoid compiling with old...