Malware in node-common-npm-scripts

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in node-common-npm-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02090694bde3634ac057c9ea4e4f37e4f65c597af5c1490bbe56a25e7acb8031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8537 Malicious code in node-common-npm-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02090694bde3634ac057c9ea4e4f37e4f65c597af5c1490bbe56a25e7acb8031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Remote code execution

Uptime Kuma, a self-hosted monitoring tool, allows an authenticated attacker to install a maliciously crafted plugin in versions prior to 1.22.1, which may lead to remote code execution. Uptime Kuma allows authenticated users to install plugins from an official list of plugins. This feature is...

CVE-2023-36821

Uptime Kuma, a self-hosted monitoring tool, allows an authenticated attacker to install a maliciously crafted plugin in versions prior to 1.22.1, which may lead to remote code execution. Uptime Kuma allows authenticated users to install plugins from an official list of plugins. This feature is...