MAL-2023-8643 Malicious code in coloureds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3f381cffa410c14f42e50fcebd0f587b105b4756f34b5a05912f38b84fdc798 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8632 Malicious code in @lognex/services-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1bffc36961ebbc0c14cde7de119a760020e401111ed84f570e3473f12d23557a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OESA-2023-1852 shadow security update

Tools for managing accounts and shadow password files. Security Fixes: shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory treesCVE-2013-4235...

MAL-2023-8446 Malicious code in airslate-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a38e9b5638e56d7f1a1fb5d3d5d396fc0a8aee158c609b74bce384f3a4d79cd5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8271 Malicious code in corporate-delegate-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 177836844dbb30a41ac458ca968707ca386ae3dce8f06fc76b0cc7b9285a6518 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8091 Malicious code in pretty-array (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c13ccb71946d796fddfaa2f62631f277063b7f3230d5fd22d783585b8ed16391 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7989 Malicious code in vesper-synth-user-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b63b940eccf15e831893fd295775cbbbee43515d20e431b70389d8775292f57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Impact of removing vs. disabling Chrome in Android

Understand the distinction between removing and disabling Chrome on Android devices using Citrix Endpoint Management...

MAL-2023-7938 Malicious code in node-hide-console-windows (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffa61f9df29f0ec2845ac6191bc7bcf26ddfd4901abd17d21359a4c5c4cd2a6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1036 Malicious code in hackzvijay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baa21bf2e50d46d8e86793d9a3b251a8fa8a72c0d1ca1086e4f68817a48a9d6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1016 Malicious code in fca-rhancis-pogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3398b30916ed54737b0f733b7dc0b100065a9059a19ffc24e45ad9690d6d85a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8012 Malicious code in b2b-canaisdigitais (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4dc971b04d6b1823268396807c41d808cc18fd8c2b2094b5c9ee6fb342083172 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

MAL-2023-345 Malicious code in fc-explanation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5a7c61119778e56e23e3e3b0e727a6e58eebb4f3fa2f739ce8a81ba608daf36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-6110-1 Jhead vulnerabilities

It was discovered that Jhead did not properly handle certain crafted Canon images when processing them. An attacker could possibly use this issue to crash Jhead, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS...

MAL-2023-655 Malicious code in one-of-us-is-lying-one-of-us-is-lying-1-by-karen-m-mcmanus-online-full-chapters- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29363c3ead0fb16e0f9653c9e4d460a997774e8c71faa1e9d235c232c4026017 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-765 Malicious code in seadrop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 093d236f43b0c51ee4f6c1443bea6422a48b0359e0c2c3a56c0ba53bd26598d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-665 Malicious code in ozstesting-pt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd890b0f1505256856827c172f048855f0dff526343f90fafb44920827544ff5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-842 Malicious code in tdv2-applet-uh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d519442dca49adaddfcb2e70a2485d27f45c8dccc1b2bcc8d539e07036741723 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-723 Malicious code in react-advanced-breadcrumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43ca4841853fdec8c951bcbb886eb3fbf01574178c614c25db2ed6a608d31d45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-5922-1 fribidi vulnerabilities

It was discovered that FriBidi incorrectly handled the processing of input strings, resulting in memory corruption. An attacker could possibly use this issue to cause FriBidi to crash, resulting in a denial of service, or potentially execute arbitrary code. CVE-2022-25308 It was discovered that...