MAL-2023-830 Malicious code in taxi-localization (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 097d1cf9ae16e020a782ddabda9f4556107a34ffa87be84afde01f013fe2e52a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-988 Malicious code in yandex-meteo-flow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad598f1585a297ca8d20439b26fa25afb526a1f69cbdde3832e457b6daa6cf83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-554 Malicious code in kikimrclient (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f3af1e0dea63ee0477319031489cd73ed7ecee518c1c80c91b8e9194e600db4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Amendment This was deemed not a vulnerability. Overview dtautodevweb is a malicious package. Note: This package was uncovered by one of Snyk's automated algorithms, and was since confirmed to be a proof-of-concept package uploaded by a researcher. It has been removed from the ecosystem and does n...

MAL-2023-134 Malicious code in biputils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3bd6095c684fe80e02dad8578e2dbbc75e183a70fbb1753752fffa06065e7b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-128 Malicious code in best-man-fast (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15fa50f52202384b37b1b714460696e713ae0766713264f909b1a18d42847bea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-22498

DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...

MAL-2023-241 Malicious code in dependancy_confusion_test_tal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9144894e475b05fd94cf378496c85c5358f742406f2806b68542b333658eecf4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-236 Malicious code in dep_conf_tal2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81af9f674f57a93af5a9030b8e05949d3ee86a9a5fbb1c98c2ffa3c7384a7344 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-237 Malicious code in dep_confusion_test123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95f5bc391a39cd114fa8cbec14792e02dbc7fdc132c33d675e5fe104568d81d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-235 Malicious code in dep_conf_tal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f17540f057215075d86afa66455fa1f138a3e04be90742219ba083ffdb95f32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-689 Malicious code in portal-numbers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 274c5bf1b8b6d50340a45e5b6b5fc38ce8f38f3d1c1138d90dca4aa0d1e26ca3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-271 Malicious code in donuts.node-remote (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 589d937e738773f2893caf9608e4b93c3616dad1f93e5d6dc62834864e46182e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7296 Malicious code in xrpl-org-dev-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 200d97a2ec5482269915689627e76de8f5f274aadcabbdae30f3dcd313fe599b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6855 Malicious code in usaa-typography (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c459f6f99ba8293610148243ff44fd4b6810f70dcb75441158c134021cb7e95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6836 Malicious code in usaa-datepicker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89e353ae8301d46db2e23da34acd818fc3cf9f83c8bcad335c7a22849c025d74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE-SU-2022:4625-1 Security update for ca-certificates-mozilla

This update for ca-certificates-mozilla fixes the following issues: - Updated to 2.60 state of Mozilla SSL root CAs bsc1206622 Removed CAs: - Global Chambersign Root - EC-ACC - Network Solutions Certificate Authority - Staat der Nederlanden EV Root CA - SwissSign Platinum CA - G2 Added CAs: -...

PT-2022-28245 · Sentinelone · Sentinelone

Name of the Vulnerable Software and Affected Versions: SentinelOne affected versions not specified Description: Threat actors impersonated SentinelOne by uploading fake software development kits SDKs onto PyPI. These SDKs contained fully functional SentinelOne clients but also included malicious...

CVE-2022-4685

DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...

CLSA-2022-1671656169 Update of ca-certificates

update to CKBI 2.58 from NSS 3.67 - removed old certificates: - Certificate "Camerfirma Global Chambersign Root" - Certificate "Cybertrust Global Root" - Certificate "Equifax Secure eBusiness CA 1" - Certificate "Equifax Secure Global eBusiness CA" - Certificate "Explicitly Distrusted DigiNotar...