MAL-2023-7972 Malicious code in mmolecule-mongo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58a366e3569240ed527be31fd441fd81fffa6cda4ef1aafff18620fb71f1b433 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7978 Malicious code in react-navigation-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ac24ada2566f97d5be199f6ef9006e9556055d6747f993a8b1ae0dfb8b66a9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7967 Malicious code in @manomano-internal/toolbox-pkg-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fc7979e3934ed11d3e174bef1c18bbc67bc57dbce890460d07d7ee1e2d60d68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7949 Malicious code in dcdemo-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 050cac6602978cf16969b08af722b2632273f6a067edfed937e3bb3d08343758 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7946 Malicious code in @apex-ui/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4019e99da7923a93919d8a184b8ea6b720e390e1ac8d94deef47992fdcdb238 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7948 Malicious code in colors-enviroment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29ac8d849a43df619a8ae11f9774485d716cda8c540cd95729aaf9344e2cf476 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-v12-lukyy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84f8bf74e566b2971105d1d8482b27bb35a3cd1aa60def4e10b9ae09a4397da8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7951 Malicious code in docker-slim-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c43f388e17851e78ffe6cea282489130b04ea50c71f40d951e492b3128f019d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Qlik Sense 输入验证错误漏洞

Qlik Sense is an application from Qlik USA. Allows users to create visualizations, charts, interactive dashboards and analytical applications for local and offline use. A security vulnerability exists in Qlik Sense Enterprise for Windows. An attacker could exploit the vulnerability to access file...

The vulnerability of ScrutisWeb banknote monitoring software arises from an incorrect path limitation for the access to the restricted directory. This allows a hacker to gain direct access to any file outside of the root directory.

The vulnerability of ScrutisWeb banknote monitoring software exists due to an incorrect pathname limitation for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain direct access to any file outside of the root directory...

MAL-2023-7938 Malicious code in node-hide-console-windows (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffa61f9df29f0ec2845ac6191bc7bcf26ddfd4901abd17d21359a4c5c4cd2a6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7928 Malicious code in @webquote-ui/iceberg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8020f294471f2ae9d52d11a800530c0fa88579565b79ab86f36f6d3ea6df93e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7911 Malicious code in fca-mdong-remake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8aa3fe0ef5d71c1d6ecd9de7850834521703b63c9a7fd9f92cd6f8d9a887f6ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7912 Malicious code in malfex_api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf61c4d8d649d32458d1f89955b492660ca62652ac0c9410d9a9c07a54b3d546 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7914 Malicious code in poctesthackerone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e10f050ce87c2eddfab008bc14c595470ee57d39981deba3bacf86bbd6624ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7899 Malicious code in fca-orion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd59dfedf3ade34334f9cf2dc633000689c8ecfd2cc95b32b53e7723841c0fe3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7900 Malicious code in fca-spbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a8ff7a08abab44b5a236e031340c492d901250c279d87f7078124850ecad03e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1545 Malicious code in gradient-function (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d41bbe2c82b0cb7c5410006430478c3cc70133f726eda4f584c0f7f943ff938 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1544 Malicious code in @rsi-core-services/rsi-authorization-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 785efb82835955bfdb6f4000c3dc08a8af40dcaba87135a8c64e306f0e22f141 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1509 Malicious code in @lg-private/mongo-nav (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cfb13dbbdcd525742b9cca74fa4bac901e7a3e1601a9dba4e97986336210dde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...