Malicious code in arrays-string (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 058ca280756e331336b85903607b74f86355c7e7d889a956dc9a904f6e2c5485 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8708 Malicious code in discord.js-unofficial (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2cfb5f5169ea123ccc46368108dd1e9dc29b9a693076f78222663d3de02c2bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8704 Malicious code in blingbling-dasda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46ed500c1c71ca63e8e0f525af316a734b58409740e27e1e80b8065e341ecc9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8699 Malicious code in web3-core-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29bb5d3d302e021e8dddaaafa92aa8444f3496917be02b290087b0c9bd4c4b54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8696 Malicious code in @gtfobar/pwn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29393b755fc68b86e17f968b750991f19288e7bd3b74adc485ba0ad947aac5ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

tracker-miners: sandbox escape

A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted file to execute code outside the sandbox if the tracker-extract process has first been compromised by a separate vulnerability...

WordPress Plugin File Manager Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2023-32413 · WordPress · File Manager

Name of the Vulnerable Software and Affected Versions: File Manager WordPress plugin versions prior to 6.3 Description: The issue allows an administrator to set a root outside of the WordPress root directory, giving access to system files and directories even in a multisite setup, where site...

MAL-2023-8677 Malicious code in sentrybrowser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d612638266f3e357a904ecb6eb51c3d2579e19d19916e47b18615e802b311f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8673 Malicious code in kindly-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3df19034df58ae63ea16e04d79827be967105dfe24a2074dea497a46268c1910 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8670 Malicious code in react-hook-form-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0cf2d07005ec432f85b35387c34d03f3229f9aaeeff947232ac2f58f6015853 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Mattermost Injection Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a security vulnerability that stems from an inability to validate the route parameter in //channels/. An attacker exploiting this vulnerability could access files and directorie...

MAL-2023-8662 Malicious code in pdf2teste (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f9095d50fddeb1e4dbe750872479447be6f524bb0a38dc61daab6937f8b2a88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Medium: libarchive

Issue Overview: An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extra...

MAL-2023-8657 Malicious code in testepoc20232 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8dd5987640ec3b65ed0eff65c7d86690471fd73590b96b95eb64f407e8a6dd74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8652 Malicious code in cannotdelete (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05bb625bfc6b79438d4640ec1ac56dc05c2aae9ab8d9ed8bc080896f5af18253 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8643 Malicious code in coloureds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3f381cffa410c14f42e50fcebd0f587b105b4756f34b5a05912f38b84fdc798 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bsd-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 930457e9326c25bced7ceddcc7a51cb3d5a90222f749dbb3eaa691413b16725c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8630 Malicious code in @lognex/ecom-recommendations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0ab65eb1c1e53ad84ab09e9426d718197e6137500c81a66639f4e4249e39edb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8632 Malicious code in @lognex/services-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1bffc36961ebbc0c14cde7de119a760020e401111ed84f570e3473f12d23557a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...