Malicious code in cat-webcomponent-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e416fba4ad4098c98b9a1b6b381472b248c0fc0dd977333c87e9f707251deb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in brave-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc50cd5d32f408d873606c4837a20d8bbe471d478d7d7f5a1a2b21112eedfdab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gd-activity-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be919ac20b6023e27b37ab04354acc2fe0d76aadf72ab3ccea2dafed5df390a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tangerine-state-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83cabb2630e510d0c9b63f6c164c5825dd5325a370fd8db846ead2bb3ed782a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ms-2.0.0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b103637ace33e42a60052af2564553178c509c8c0bfb5e92c376388891095a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bounty-plz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80028b7efd67458fe4d402b82e87526778a2276963829161633e17193ad92e6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in csdn-tree (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware deec9b7e940376980cf54f78695f6b5e89bdbcfa2afa4b705397b492ad815343 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in woocommerce-infinitepay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1bb3742de26f34528832b7b1ab7ac1e502dbe17ef3e8ec318b1444590a4a003f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in maddysmith-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d628a677acbf07d4b86ccff9a8dcc3baefdfa6b86078f7781b4fff83c6e5d24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in whjr-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9dce9c9aaa9e383fef4277d3ac40c8e55558803e648049e419c0f3370b4cec1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oms-sentry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fc10a735991e54e1553bcd8bc1c4041ec2456c5e47cc64291bd5ea3931e5c2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in amber-blocks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3208a0e9e86eb52f116297b63ace8b8ac82e33365e0a8b566ec74be4d421633e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pp-mp-connected-path (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49db9986ebf217c7ccbc304c8d4eaee13ec495c5891270c696f80b69f479b830 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zuanshi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b63254b223cbeaba40946dd0cc604245529ff5b147026f6c49ec973877507c33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-libraries/driver-outage-db (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff6efcfcdda0c9d58ca14f7eab6a15de18eb1c378c723af90f2556ab8cd5457f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testingx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec41ceb63dd221afb9f167fecc39fe14258dbd4020d0e62d7f7df94062c2679b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-kavak (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89ac6e77aa5aa6dec64f082bee8330aa686fd2d7d315dc1d474cbaaddbc1c7c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2019-12408

It was discovered that the C++ implementation which underlies the R, Python and Ruby implementations of Apache Arrow 0.14.0 to 0.14.1 had a uninitialized memory bug when building arrays with null values in some cases. This can lead to uninitialized memory being unintentionally shared if Arrow...

CVE-2019-3688

The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain...