Malicious code in react-yandex-favicon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67fbffe869a619ee770b50818e5f42a7e85a7f9e673bb0310f4dc6c0a7d550e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in calc_tj7r6uk4vf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49893f957d5df6b7192a31b5c43e7483cdefa3a60e3994eb21d121bf0172cfc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @fbpay/merchant-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff532b8bb4d8394da283651d098a5f4b99d05a8cb40e0417ea040d71fc80b35b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-checkout-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee64b0c73150a9bc88d72723046c6848958f503781788be03e8f8724c044ad24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ljon/meterpreter-backdoor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc8d64a22d47684bee253cf7b8c674edd75ce97c1f420c5bdf550e7fd1e145cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in keychainswift (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1677ec271c1f0ae18c70883a814436b2928eccaa797b1b3f6b52a6705ee5bee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bitski-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9af74f514bc8b006e8fc808aa19f32db44fe938e7c3888a6fa69b2d0d362b90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kim-im (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ae62682ee14d5986073ee30a942513c3872303fd4654cfb3806a21c155e0bc0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in registrydependency2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef160d77c9602074dcad0ac7e16f825779403d92831ca41f679ada34250d7ab5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in c3p-test-reactnative (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a85e362348cfdf87634f86d2c30ff5768987a1f8625465cb1e0bad5aa9c182ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in letmeflyaadd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb7fcdb648145fc276cd9f415b6c7ced3b1c36f4e6c00ed128a25ea8e8ec0601 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bea-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12e26d629eddda0237f04bb05d4768fe994fba8cf2d58c93b58b047a7d69175c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in colorsss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2e968d7285cddad793c46e77a5a33bbd2f471415fce24a11f557f89e732170f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in colors-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e59ac2b2a06452d5c70fe49aaf0cb6baba1976d170cb46fb2f67bda44011db6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in custom-url (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf7b0962cf6adefb05156867fa693240c50b6165462a934cba8746791380c615 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gxm-reference-web-auth-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9855cd313f0caad339a8d9a7e306fa02de1b2f2a0b2436b0d463a33f78e09c08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dapp-inter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7896c78fa6966c4f1f14b3c18ac93259d9b7798a3ef0ad785bec4b65bba4833b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apps-showcase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c82f48875c33cf0dc7ce3363a53872dd7ee778927e9083715b9d88b29be083b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-25845

The package com.alibaba:fastjson before 1.2.83 are vulnerable to Deserialization of Untrusted Data by bypassing the default autoType shutdown restrictions, which is possible under certain conditions. Exploiting this vulnerability allows attacking remote servers. Workaround: If upgrading is not...

CVE-2022-30711

Improper validation vulnerability in FeedsInfo prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities...