Malicious code in angieslist-composed-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e50e368795012d109d73c296959a8c34f7cdd3786281fec412fec914af10e1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2573 Malicious code in dortmond22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 760248828bf200a47a8f8e38cc7ab2a81c896673f96b237b4e363fd2241561a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xiawaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c17bfad038e525655293236bf331837680f82298f17e10ca1c5ef9f7adb23ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @seller-ui/settings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4674644c2014b06237b7b57625ef3df259e929582417222203faa014af763046 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1991 Malicious code in coldstone-sls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72ac39360f255a45fb8e4b2e5d51651953e42f65c88e3db649b633eb728d5c27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in api-extractor-test-01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d2e8ca531ea558490f3d56526d4d34d2a7e331a33a10d94cfd75f8eff65807e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1040 Malicious code in api-extractor-test-01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d2e8ca531ea558490f3d56526d4d34d2a7e331a33a10d94cfd75f8eff65807e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-infra/app-lookup-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bbe84e4aa37a9b2484d307db5f4e3ac6dc202acbd2d528d2949bd1c1ce0e43c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-236 Malicious code in @epc-infra/app-lookup-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bbe84e4aa37a9b2484d307db5f4e3ac6dc202acbd2d528d2949bd1c1ce0e43c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-libraries/kinesis-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2395684a2ae7565ee6ee411ffbdf038c8b48b3c3a2ffe473e90087627b114bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-libraries/data-api-versions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f82fc77aff4c8f44ec626ff023762b926e5407f3b269db521d9006777e956242 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-244 Malicious code in @epc-libraries/cdk-custom-resources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28aceef06911da19dfe5a1f64caabdef91e74dc144e17e81f52bd1894737a018 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-231 Malicious code in @epc-apps/api-generic-plan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3783a587d271aec0c7725f7a4d384068e3ea63c385265d50717808837ae390a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-infra/users-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf73169208787ddafa275f2837c6596a96541a2c4b1526a4cdd468678bfa4e47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in colors-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2d5af6f497e0202edee961786dc6b4e44031f670e8aa5748f10467dc2b286de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-998 Malicious code in angieslist-gulp-build-tasks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91073d8aec7654e92fde4a5136f0cb4bd9ec77e2175cae875ab44d249d299818 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2103 Malicious code in com.unity.searcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b14aeba676170a1376e65d8f33d8dea365e9c1d773f411624d9aec9f2d3a21ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in personal-colorss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b457f778b7d2d5419ef9ed84f7ae14c68c3bea5b4980afdfa74f782c9fde7fb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ROS-2-2241

2.2241 PyYAML parser vulnerability CVE-2020-14343 1. Vulnerability description: A vulnerability in the PyYAML parser, is related to insufficient validation of user input when processing unreliable YAML files using the fullload method or the FullLoader loader. Exploitation of the vulnerability...

ROS-2-2163

2.2163 PyYAML parser vulnerability CVE-2020-14343 1. Vulnerability description: A vulnerability in the PyYAML parser, is related to insufficient validation of user input when processing unreliable YAML files using the fullload method or the FullLoader loader. Exploitation of the vulnerability...