Malicious code in very-bad-transitive-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a9acc8ba367a82af4fdbd34224c7bd392db0ce1df3885c0b4ff0de151e2baac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in imposter-pkg-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e5127f46671b090bf9ac113a3ff87f19d522e0ec80dda844332b9625b30ecf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in imposter-pkg-poc

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2023-521 Malicious code in imposter-pkg-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e5127f46671b090bf9ac113a3ff87f19d522e0ec80dda844332b9625b30ecf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in very-bad-pkg

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in very-bad-transitive-pkg

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

manifest-confusion-check (>=0.1.0, <=0.1.8), manifest-confusion-dependency-package (1.0.0) +1 more potentially affected by unknown CVE via darcyclarke-manifest-pkg (2.1.15)

darcyclarke-manifest-pkg NPM version 2.1.15 is affected by a known vulnerability. The following packages have a transitive dependency on darcyclarke-manifest-pkg and may be impacted: - manifest-confusion-check =0.1.0, =0.1.8 - manifest-confusion-dependency-package 1.0.0 -...

Exploit for Improper Ownership Management in Debian Debian_Linux

CVE-2023-0386...

CVE-2023-28424

Soko if the code that powers packages.gentoo.org. Prior to version 1.0.2, the two package search handlers, "Search" and "SearchFeed", implemented in "pkg/app/handler/packages/search.go", are affected by a SQL injection via the "q" parameter. As a result, unauthenticated attackers can execute...

Malicious Package

Overview @sectest456/toxic-pkg-dont-use is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

Important Photon OS Security Update - PHSA-2022-3.0-0507

Updates of 'linux-aws', 'linux', 'linux-secure', 'grub2', 'linux-esx', 'linux-rt', 'pkg-config' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2022-0300

Updates of 'pkg-config', 'sqlite' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2022-4.0-0300

Updates of 'sqlite', 'pkg-config' packages of Photon OS have been released...

Malicious Package

Overview fixture-pure-esm-pkg is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

PT-2022-24831

Name of the Vulnerable Software and Affected Versions syslabs/sif versions prior to 2.8.1 Description The issue concerns the verification of digital signatures in the Singularity Image Format SIF reference implementation. Specifically, the github.com/sylabs/sif/v2/pkg/integrity package did not...

CVE-2022-39237: Improper Verification of Cryptographic Signature

syslabs/sif is the Singularity Image Format SIF reference implementation. In versions prior to 2.8.1the github.com/sylabs/sif/v2/pkg/integrity package did not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. A patch is available in version =...

Malicious Package

Overview @ramanmg03/web-pkg is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

Malicious code in reax3-pkg-uyp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b2d9d0734f5e68965fb90e95c848c40a2a434ad677bc737ad543c7e5b2b356a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5711 Malicious code in reax3-pkg-uyp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b2d9d0734f5e68965fb90e95c848c40a2a434ad677bc737ad543c7e5b2b356a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview simple-project-pkg-b is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...