MAL-2024-29 Malicious code in warbeast2000 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3f9238061e04c025429d5d714dcb96fd9276ee820fd4bfaa3eeae959ff105d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in matomo-looker-studio-connector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8882cb12f515121a2bb1a68d29a247d90b65f5a85e13154e1ed8988e0c4bbcf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-16 Malicious code in get_name_of_token (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6b5dfc1df3f6f7257bc6a0ffb95fad3de4cde82911c81d5f21f1d8b70d05d6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9 Malicious code in @msmg-money/get-current-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fc0472c5df497035ba44d0a77a71996819e8234defd28002ebdc7079ff477ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8773 Malicious code in holland (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7126f7b736ad37c767545428db7c071735738d8ae229e34b18808054f175e6ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-selbotderank (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5260eb5b081fbed08c3915d652632aed1e6899f2bca15853a142f45cf5b35c34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8752 Malicious code in discord.js-self-v21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7ff51b0a254299fbcba44e692ad912d759a48d835ffcb10759424392b1debdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8734 Malicious code in next-id-doc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78b8ec553ac410688ce195e0361743232f4c5c356df00d5dfb465da50060f8eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8738 Malicious code in element-block-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e6f663cc9659fa8c59510bbcafc19cd5f945595016e12e8f603250d824196cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Race condition

A race condition in GitHub Enterprise Server allows an outside collaborator to be added while a repository is being transferred. This vulnerability affected all versions of GitHub Enterprise Server since 3.8 and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1...

CVE-2023-6803 Race Condition allows Unauthorized Outside Collaborator

A race condition in GitHub Enterprise Server allows an outside collaborator to be added while a repository is being transferred. This vulnerability affected all versions of GitHub Enterprise Server since 3.8 and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1...

CVE-2023-6803

GitHub Enterprise Server contains a race condition vulnerability that can permit an outside collaborator to be added while a repository is being transferred. Affected software: GitHub Enterprise Server (all versions since 3.8). Root cause: race condition during repository transfer. Impact: potent...

PT-2023-32778 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions 3.8 through 3.8.11 GitHub Enterprise Server versions 3.9 through 3.9.6 GitHub Enterprise Server versions 3.10 through 3.10.3 GitHub Enterprise Server versions 3.11 through 3.11.0 Description: A race condition...

MAL-2023-8727 Malicious code in discord-selfbot-v13.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a28fa86e7d878dc6267f483fefbb3fdab0fe04ea75dffa4de10cc5ad899c5be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8716 Malicious code in bv-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e94e80ca26866e3606d109422a90b437b22822a2c3cd64b9d0584b35114f07c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8721 Malicious code in jupyter-notebook-deps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 149056bec7a565568bd2ddea92746e800266ecb291da0df46551b2d1766551bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8723 Malicious code in nice-dag-kernel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9daba1d90e3e64cd044b78b1bbb9123a3c748dddbd37b2549c9dee2164eaa56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8717 Malicious code in crossdomain-xhr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ab343d1f78365f0bc2589bd835b94aa0fd90723d8e80a9d0b774a3a99589b0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8719 Malicious code in figma-include-accessibility-annotations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcb17fd8a376f1c1967e4a54049e96bf34f63f71f41e75262db53f96e883d43d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2023-5115

An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path...