MAL-2024-8406 Malicious code in @diotoborg/libero-ratione-delectus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e03dc878ba32f02ed8a95a2b374d2309303b2e1b73e66f470041bb5e2298f62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8403 Malicious code in @diotoborg/libero-asperiores-at (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a35a71aba7a670730ac4f1a5a5536ec8a08d746fafe3ad4077a2397235c7b5a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8394 Malicious code in @diotoborg/labore-placeat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fcca26bb0751f3be684c51140f6845a429d8b96f24778e5da1b96797be4c435 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8385 Malicious code in @diotoborg/itaque-officiis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21dc9bd57347dac47e623278a377258f5e417708b9ab4f1ae8f859877d6a697d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8623 Malicious code in @diotoborg/sed-doloremque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed54be7c12474d93873c7c7e9fad58c1cfcd6f66bbbe0e3cafba4e1c7a571b2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8680 Malicious code in @diotoborg/veritatis-nihil-vero (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9ba3c83387cbad77cdd8562ceaca6afa51c3114fdcb3d2e77706bdeff09ca50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8399 Malicious code in @diotoborg/laborum-recusandae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 078e2e1f34f5bbc720834781bd58942eaad607e424888cd8c33cdaaaf56854b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8236 Malicious code in @diotoborg/dolor-iure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3be10d42319867c1e2cc09c5f46c08e47935490859aec4f7ba3b6ca4973433f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilities in multiple Open Source Software (OSS) components

Summary There are vulnerabilities in multiple Open Source Software OSS components consumed by IBM Planning Analytics Workspace. These issues have been addressed by upgrading or removing the vulnerable libraries. Please refer to the table in the Related Information section for vulnerability impact...

MAL-2024-8075 Malicious code in jest-preset-halo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfc2dc8d28922810c8762769169e159199afd36350a743770e0088d5c54efbd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-48870

In the Linux kernel, the following vulnerability has been resolved: tty: fix possible null-ptr-defer in spkttyiorelease Run the following tests on the qemu platform: syzkaller: modprobe speakupaudptr input: Speakup as /devices/virtual/input/input4 initialized device: /dev/synth, node MAJOR 10,...

CVE-2024-41047

In the Linux kernel, the following vulnerability has been resolved: i40e: Fix XDP program unloading while removing the driver The commit 6533e558c650 "i40e: Fix reset path while removing the driver" introduced a new PF state "I40EINREMOVE" to block modifying the XDP program while the driver is...

MAL-2024-7757 Malicious code in noblox-cores-ts (npm)

This package is considered malicious because it contains a heavily obfuscated postinstall.js script with multiple stages of payload execution, resulting in the delivery of QuasarRAT. This allows command and control by a malicious actor. --- -= Per source details. Do not edit below this line.=-...

CVE-2024-39479

In the Linux kernel, the following vulnerability has been resolved: drm/i915/hwmon: Get rid of devm When both hwmon and hwmon drvdata on which hwmon depends are device managed resources, the expectation, on device unbind, is that hwmon will be released before drvdata. However, in i915 there are t...

MAL-2024-7149 Malicious code in @zitterorg/cum-non (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11602bb1210f3dda60b24294fab56bd0353ac845e73d9711cde4936c2de87a7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7228 Malicious code in @zitterorg/impedit-ex-praesentium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a01b2c2c190e9b51f0ad7dd5d279aa1887f4286b8fd0f273f681093968ed6799 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7187 Malicious code in @zitterorg/eius-atque-itaque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e488c1459cd82f91e0e9e3433c6745ddc90c432aafb23b6fc61a3db32379f118 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7239 Malicious code in @zitterorg/ipsam-officia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6490841eb885d4711d6a5e5a41e93e85704f8da80f267e9a5cf4fb7de5684653 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7341 Malicious code in @zitterorg/qui-aut-dicta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 345f038cdea5022aeb981ae9b3e44da2a1b5c102e35eee01b11f8861bb09b8d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1675 Malicious code in near-linkdrop-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ff40b77a91a8e45cd8e9541c0872d1e97a5e365768e2e6f34550d24f8c02fa0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...