MAL-2023-908 Malicious code in ts-messenger-api-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcd86ca9e67b7044c40aab4cc9d48b42d720f8c8ed5d0a1a19d3116874e7e517 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-disme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 539195ec65bed7f04681789eda8f4e5196e2934d0770c8e7214f0fe6988e5a41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-747 Malicious code in rmbg-disme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70d37810d3abbedf9691f2b539c619e9825f41f082b6c15e87f2e14168e60052 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the kernel of operating systems such as macOS, tvOS, watchOS, iOS, and iPadOS allows attackers to execute arbitrary code.

The vulnerability in the kernels of operating systems such as macOS, tvOS, watchOS, iOS, and iPadOS arises from operations that occur outside of the buffers. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

MAL-2023-228 Malicious code in dataminr-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b286dc20121800a015dbb4aa930090547527e1263d319be083abaa48972a725 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-229 Malicious code in dataminr-instrument (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92d29ec68696fa0098daae652b7409753515de66ad175e97545cf2e8e58e41fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-297 Malicious code in dwolla-algolia-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93bb17b6d0a8a1b69ad18cd8ebd649cbb5d7e60f664ab2dfa212cb9f686ac801 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-150 Malicious code in bykea_node_boilerplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee7671f75f343e3ed72d88d13441eac9e2269d6399266b79952a9a1e9b25a25b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dvf-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf18547f9f147479c4459ff3e5a5ea3c30c2f74abd59960980007211ed420ee3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-616 Malicious code in nayduck (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb0f8f1fb55d7c0ab3534b324088d7e45c50a528a69143855696fd38a053e03f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-783 Malicious code in solc-0.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cb2ef4de1156c7094d66ff9e85b4e9b17b04b11eb2348040a1f7c8756c7b0a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-184 Malicious code in climate-warehouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb03c4128835a9256b968cd63d617675ff8af803b43a908731d04f8b1b81151f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-444 Malicious code in flip-flip-flip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 979398f3d7841429ee6d7d3243443012ce40985d7f58183ef86e4cc17f6b648f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PYSEC-2023-51

ubireaderextractfiles is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of the extraction directory provided the process has write access to that file or directory. This is due to the fact that a node name...

CVE-2023-0591 Path Traversal in ubi_reader

ubireaderextractfiles is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of the extraction directory provided the process has write access to that file or directory. This is due to the fact that a node name...

MAL-2023-891 Malicious code in toh-doc-files (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e19436233a047eab780063a658fde54dd5df420b84f4e095b0af5b16f6d7e328 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-893 Malicious code in tohe-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b243cab2a6d28350da02c87edd35680ac4d18b7ca5f27ebc765f39a3773c1ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-94 Malicious code in angular-mocks-1.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 625a13c6d2cc904b846cc79015624cac75f57596e17606b783aaa1ccb6dcb164 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-466 Malicious code in gatorcomponents (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8f6b3dfba6b091155d80be64c8691f83194a213887c0069ce15b0092bd630d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-714 Malicious code in pxt-arcade-sim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d8c72a30beb5660a4ef7bc4ad2831a1aac167e41d4f8d7c2fab5e1e452e5ae9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...