MAL-2022-390 Malicious code in @logistics-frontend/blocks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb407e89990bc6a460beeb330789292665ada7885bd91e2013e25ca373b54e4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2590 Malicious code in dragox-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b050acd8ab9644696e1fb0dc416a070df01b8789894c9bc500918f919dde475 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2022 Malicious code in colors_express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28bc2843a87b773e6b16104c1ee4c2e68f2b7e8eb4ec84476a844b5f2fb6bec9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Locust Stored Cross-site Scripting Vulnerability

A stored cross-site scripting XSS vulnerability affects the Web UI in Locust before 1.3.2, if the installation violates the usage expectations by exposing this UI to outside users...

GHSA-VQXW-9PG7-V7V9 Locust Stored Cross-site Scripting Vulnerability

A stored cross-site scripting XSS vulnerability affects the Web UI in Locust before 1.3.2, if the installation violates the usage expectations by exposing this UI to outside users...

Vulnerabilities fixed in Mozilla Firefox and Thunderbird

Mozilla has fixed two vulnerabilities in Firefox and Thunderbird. A malicious party could potentially exploit them to execute arbitrary javascript code outside the context of the browser, potentially gaining access to sensitive data. Mozilla has released updates to fix the vulnerabilities in...

MAL-2022-1214 Malicious code in axp-utility-belt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 432021c8e0da8798e3783329a5a3ff6ec980b17267c665dc0c93d2e001a0e6a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mollie-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e4acdc4d5f723ad8ee6225520718f124eeb148131903261e445699cbd664d21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1212 Malicious code in axp-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70a5f3aa5db3120296ea6ab090412c4520f66f6e1d1de1a451c12db3aeec6cc0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2464 Malicious code in dgse-tools-mgm-elf-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94fa3bc00924ee4412de68e128935dc2a12449d3804c9f1fc5a5977410c13c1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2378 Malicious code in ddc-new-relic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 724b8e2d9bbce93045922539d67f166495a0abac1fe3d410e5cea2ec861e82d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5243 Malicious code in paypal-rest-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f5c6beb6bf6ebdd58d3baff1e4017eacb25c5cda9a802eb8dbb5e2d2abbd8b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2769 Malicious code in epic-support-prettier-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56deb20b56f88f97b545096c3e158cb4708ada1984eac27f01ae315deb0fc0b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6917 Malicious code in videojs-vtt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e61d79fbfbb649e094b947834792631ccad06d06b4674a76ad724e136e1c3835 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5260 Malicious code in pco_api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9c8289fc4eb78d3e66ed76818f5f799edc0dbee5bebe64774a03a2c3148158b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-997 Malicious code in angieslist-composed-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e50e368795012d109d73c296959a8c34f7cdd3786281fec412fec914af10e1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7416 Malicious code in zureexplorer2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5ac15fa86e0c4e3a272e5392ffee3144b6cc3b1e85b26f436d0c0d2ab3453d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2573 Malicious code in dortmond22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 760248828bf200a47a8f8e38cc7ab2a81c896673f96b237b4e363fd2241561a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1540 Malicious code in bfx-hf-func-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7631340a32bc76c05bd236bc6011f4f1040460a40997bbec6fe11016748b4029 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6508 Malicious code in testapp00009 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fb396ef5f846069b4adb5738c3c1f69ea523ac3b4b516f1437304f6cdd35f69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...