MAL-2024-8358 Malicious code in @diotoborg/illum-ad-corporis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 697629157fc87cdd44f67258a507098c56ef42fb64823ae1130b671cfd7ceb7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8224 Malicious code in @diotoborg/dicta-recusandae-veniam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ec79f36c2a8336b9840f24bfc59847acfb4e18a7909792f533ece2397a29d3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8476 Malicious code in @diotoborg/non-reiciendis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfc15fc5f38fd3f6e22dba7c6a6376651aa64706e3e0602a50903b3068117782 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8298 Malicious code in @diotoborg/est-voluptate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 123216ff6075f5c5fd7c70158b40456dc13dd5b468ee52df0fd1491f9c54b71a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8244 Malicious code in @diotoborg/dolorem-possimus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 594648a6e233b1180f89cb194e6ddf0cebf9f265ae0f11b2b6d13533ccfc1d52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8579 Malicious code in @diotoborg/quo-neque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8feabd1d57e9c96d3054cd7555e65787cba38d8f395639ba801d91949efb4ff3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8185 Malicious code in @diotoborg/consequuntur-dolorem-dicta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f213e5ae0b66204727b039d73a0c80ce3554366c5cfe52e65f43fc9da97cd90a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8095 Malicious code in investitsionnaia-platforma-finam-p2p-zil8cb0ii (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0f7ffb84c271562d5d11d1e496b4ab57ad68d9fd2d3196f82b59d0c028cdbf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8096 Malicious code in kak-kupit-kriptovaliutu-v-rossii-cherez-tinkoff-investitsii-s21dt6n0d (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 722439ce10201bd57480a22eff49b9404dd698bbc8e34f901c4259142722a1ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in copilot-web-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbb28669371353c111a05f7fb6bb2803179610b8ccec893590a34d2343e90fc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8081 Malicious code in milowebsdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a40bdfac421ca7bca789b4f66c1bb8d98644cd0cda4e376fa9d1cdb2e63625ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8070 Malicious code in commitlint-preset-halo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b7e833bc850b9e63b0465ff039204c0ffca31632fd1c5fec4e2b3e32e8f0878 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8093 Malicious code in yyb-monitor-web-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e875b3137112fba7095315990205008d6a37bdd38cf6fc166b7a7f3de1ada1c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8086 Malicious code in noblox.js-threads (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff6e7081bd0620aa9d7475eb55589362075317d25dceecf4c6df7ce2230ce28e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8083 Malicious code in noblox.js-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6617325d384923ff6c3550fcdbbca7335b83dfe3648f2218ad700e0ef12f601f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8090 Malicious code in sweet-ruin-immortals-after-dark-16-by-kresley-cole-on-audiobook-full-volumes- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6ddd212ce30f7b7db65579b6f4be56f10137c104c7ab63553566ccd90a1ff3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8073 Malicious code in finam-p2p-nvsniohj8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c72a6c8ed38a861980c68e6752dc171adaf30ae4b9080b9aefe4a71b5a5d34eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8068 Malicious code in as-rest-api-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ce680287c711409073b5144305ae85ce29123f6841998697d979ee6414baddc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ollama 安全漏洞

Ollama is a large language model from the Ollama open source that can be started and run locally. A security vulnerability exists in Ollama versions prior to 0.1.47, which stems from the extractFromZipFile function being able to extract ZIP archive members outside of the parent directory...

MAL-2024-8059 Malicious code in lodash-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9f3565f115c4b58b6ebacb1536e206aa7c84c9f3a0c73b0ebe5628ae94d0546 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...