MAL-2025-2746 Malicious code in agentbse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbc1a3323e35cbce1ddc24ab20a734247f6aaa56a638b8a7eb30c49b18e4278f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7702 Malicious code in cloudhost (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06d8e1813e9e9ae1dd5749ee815f32696a16d538138675ee92e5cd2272e6c870 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7407 Malicious code in @zitterorg/vitae-non (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d396ac39fe415b823f8b908a69652a99cf9bc80b5f035f6c2a844a8d8686b328 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1606 Malicious code in djangosnippets.org (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c166a453b773becdea05dfd92ed988141528a96f6dc77e8435f871c68c0d3f1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1255 Malicious code in deprecation-silencer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c51728830d7aed5b2134c0a91306e13560b271e8508376b3364616e35473898e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-499 Malicious code in wlwz-2312-3605 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c8e20d7791f6d48303630a98a99136a6291477da487e84b0fa772d70d69f762 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-995 Malicious code in yandex-yt-yson-bindings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ef8f5064d17e16f308f05ff124d515f803d1acfdc65fa58b4c26a8ac52041b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ihgyfqjvdnuwtkxk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 260eddb0c6693f62d0209cd63e01d5c2fbe699a1b352d55396b574cae63e3ae7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1549 Malicious code in bfx-reports-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c91401ae4d7bf54dad96d13c79dbe2470122cd840dc7ebc1abef3273f3c26c7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1136 Malicious code in assessment-zmarta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45653801bc7c04da5271fafa815874ed3e90695328e763a6415f729f6de09968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @coinalpha/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4a7704a85626f889573180f8a0f9209011120627ad9c9481261dd65ca9e3d9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

zml.cgi.txt

-----BEGIN PGP SIGNED MESSAGE----- --blackshell security advisory no2-- --zml.cgi remote exploit-- vendor details & history zml.cgi for webservers by jero.cc http://www.jero.cc/zml/zml.html details of exploit this is a classic CGI bug which uses ../../../../ to read remote files. example:...