Malicious code in sn-par-select (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2115af5e8c7f88004a13cc3253254769c561db84c32bde740ad847af36431692 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dydxprotocol/solo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 414b7a58031d755b2ab4f51d6bfc4bbaf5dad684161eab9b2d1062b8d4ce22df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-35951

Redis is an in-memory database that persists on disk. Versions 7.0.0 and above, prior to 7.0.5 are vulnerable to an Integer Overflow. Executing an XAUTOCLAIM command on a stream key in a specific state, with a specially crafted COUNT argument may cause an integer overflow, a subsequent heap...

Malicious code in luajit-stdlib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45b78e7ade789bb8def418f760cb87a5ee7cc0bf5135ba824d6de5872ef369e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in openswift (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f68aef6587be7704cbed243ef8633d132980652df6b47ce67d9e3c9aeaf26409 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Intel NUC M15 安全漏洞

Intel NUC M15 is a laptop kit from Intel Corporation USA. A security vulnerability exists in previous versions of the Intel NUC M15 Laptop Kit BC0076, which stems from an elevation of privilege, executing arbitrary code in System Management Mode, and running arbitrary code in SMM will also bypass...

PT-2022-25306 · Unknown · Overclocksmihandler

Name of the Vulnerable Software and Affected Versions: OverClockSmiHandler affected versions not specified Description: An attacker can exploit this issue to elevate privileges from ring 0 to ring -2, execute arbitrary code in System Management Mode - an environment more privileged than the...

Malicious code in ca-bucky-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ee4afc99c3034156d15adbc02cd1378995ce9c095545e9d6bbd8465f8d666cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d6502a48fdc1de94743ccc44e48d8ba7e7f64649c7221aa9bae92b139679863 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Poetry Argument Injection can lead to Local Code Execution

Observation When handling dependencies that come from a Git repository instead of a registry, Poetry uses various commands, such as git clone. These commands are being constructed using user input e.g. the repository URL. When building the commands, Poetry correctly avoids Command Injection...

Malicious code in brogan-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 142de0f01ce74f3ba2a163121986af8504eb87ba0f598ca801d4a5144f4809b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gatekeeper-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fccddd88d3d49ba86c9c5d9921f46d6e335d4394bb3f28e7510e3ff32a51b946 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in navigator-fingerprint-front (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5cf3b70412cdf56ecfd84e0cc4a5e40cf0df3251985bc497e368e9dd1894c78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hackmebankdkorrrevshell24hagain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f5268d91870f7498c6893a2dbd5c8dbbd671d72d86b96a025bbc8d200058b4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v944 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e986a5513ac5c561457511a502b5f4ed3ca17162eeee6a5409504554abaff175 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v900 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b444ce60e2348e602dc655ad88d7db0e56e3c5f7b2678bfa26154dbab981222 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed5dc2f9c9253a03084ea96ef0e33d683f1b50f994645ebf0b1222d459a48316 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v678 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fad5eff255e4aa8537a898867d022aa72241f3cc26872cb77e10c6c3c1b412ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e3b752512a57c4bf6c07b52c5160818bb4f65ac29c733e7b2e56947a61f36f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in builtin-pages-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3be644f30528e61fadc22a9526bbd5dc5460dedd27a297fe25b70ede89657a38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...