MAL-2024-1375 Malicious code in @westpac-components-web/hooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 935f3ecec4f48a905f04e98df7c4b7010c6fdc9900763c6aa3fe749e8ffd9237 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1371 Malicious code in @ozon-ob-foundation/communication (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbd79919619acaea0f1d0de932d737a71b7ac5c27049e11483522540d39daed7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1370 Malicious code in @ozon-fe/media-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f83f6ec5a227a2759eaf3a0f63b52ed88c790c3af44ea8bf3a9fa132d746220e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1368 Malicious code in brand-adidas-design-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e16fae72fd3726263d7bfa2f1c164b7d4100f89931856c163e37c534feb1a57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1367 Malicious code in brand-adidas-asset-fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35b2e8dbb891acdef0e8c7d2e97c0b27c3e6e9d4fb4ff284fa0d9542acb2c893 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

wolfictl leaks GitHub tokens to remote non-GitHub git servers

Summary A git authentication issue allows a local user’s GitHub token to be sent to remote servers other than github.com. Details Most git-dependent functionality in wolfictl relies on its own git package, which contains centralized logic for implementing interactions with git repositories. Some ...

CVE-2020-26312

Dotmesh is a git-like command-line interface for capturing, organizing and sharing application states. In versions 0.8.1 and prior, the unsafe handling of symbolic links in an unpacking routine may enable attackers to read and/or write to arbitrary locations outside the designated target...

PT-2024-10802 · Dotmesh · Dotmesh

Name of the Vulnerable Software and Affected Versions: Dotmesh versions 0.8.1 and prior Description: The issue is related to the unsafe handling of symbolic links in an unpacking routine, which may enable attackers to read and/or write to arbitrary locations outside the designated target folder...

Malicious code in @asdfvr/qaqazzaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00ddae9d7021daf95bf5000e1b7f278bcf84e7b46ceba0a5ed05943b9d7ebf57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1363 Malicious code in input-fns (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d97cebe2b3c5f99612c7086d455844599d1f9afef3e76c1c74b54de73ad1ad9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1362 Malicious code in encodelen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16f1c093c0c4c15a7c9e7438a370a2a3d42de41f0f6cc7a21695023e73647884 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the formexeCommand() function in Tenda i21 router microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formexeCommand function in Tenda i21 router microprogramming software is related to the operation that occurs outside the buffer in memory when processing the cmdinput parameter. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

Malicious code in fadam-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12fcfc7812a4dfc264dcd39b512b18975f587ef0aaf4a667af7a7bbcdbe6ef58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1354 Malicious code in @content-platform/fadam-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38b39e3ee36cc6bc7c45845d588a859e0f041b0ecbc3caaebd1ff022e1fe7132 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1342 Malicious code in @assistedtax/demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec2972fb44126ef7f02e56ab9b4935acea7521aebc2b5ef541889cb59b6bcd20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1343 Malicious code in bot-login-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 466263e8cbd2152f68613171597ebbfc45204feb62846eea580ccd128e30f498 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1345 Malicious code in generic-synthetic-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3db423ccee00e5cf1e26ff844a773827eec7a87a0f1d2a41fa7d587d99b7c5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1340 Malicious code in test-poc3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dd2e1b9551e2d05eb6769e870035396fbdd5bd09b3116b00901a73cb9e64859 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1336 Malicious code in @sxmp/detector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d54b24acdfdf427c93c47d6102673a06c407f1cd84e0508d1db4c11a98309a61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in clistsy-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d90d0caac26d33fe35373881cd3af29619f9941a50edf7def106fb9a4f2243f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...