Malicious code in amber-blocks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3208a0e9e86eb52f116297b63ace8b8ac82e33365e0a8b566ec74be4d421633e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pp-mp-connected-path (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49db9986ebf217c7ccbc304c8d4eaee13ec495c5891270c696f80b69f479b830 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zuanshi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b63254b223cbeaba40946dd0cc604245529ff5b147026f6c49ec973877507c33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-libraries/driver-outage-db (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff6efcfcdda0c9d58ca14f7eab6a15de18eb1c378c723af90f2556ab8cd5457f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testingx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec41ceb63dd221afb9f167fecc39fe14258dbd4020d0e62d7f7df94062c2679b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-kavak (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89ac6e77aa5aa6dec64f082bee8330aa686fd2d7d315dc1d474cbaaddbc1c7c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2019-12408

It was discovered that the C++ implementation which underlies the R, Python and Ruby implementations of Apache Arrow 0.14.0 to 0.14.1 had a uninitialized memory bug when building arrays with null values in some cases. This can lead to uninitialized memory being unintentionally shared if Arrow...

CVE-2019-3688

The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain...