MAL-2023-1016 Malicious code in fca-rhancis-pogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3398b30916ed54737b0f733b7dc0b100065a9059a19ffc24e45ad9690d6d85a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8012 Malicious code in b2b-canaisdigitais (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4dc971b04d6b1823268396807c41d808cc18fd8c2b2094b5c9ee6fb342083172 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

MAL-2023-345 Malicious code in fc-explanation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5a7c61119778e56e23e3e3b0e727a6e58eebb4f3fa2f739ce8a81ba608daf36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-6110-1 Jhead vulnerabilities

It was discovered that Jhead did not properly handle certain crafted Canon images when processing them. An attacker could possibly use this issue to crash Jhead, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS...

MAL-2023-655 Malicious code in one-of-us-is-lying-one-of-us-is-lying-1-by-karen-m-mcmanus-online-full-chapters- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29363c3ead0fb16e0f9653c9e4d460a997774e8c71faa1e9d235c232c4026017 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-765 Malicious code in seadrop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 093d236f43b0c51ee4f6c1443bea6422a48b0359e0c2c3a56c0ba53bd26598d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-665 Malicious code in ozstesting-pt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd890b0f1505256856827c172f048855f0dff526343f90fafb44920827544ff5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-842 Malicious code in tdv2-applet-uh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d519442dca49adaddfcb2e70a2485d27f45c8dccc1b2bcc8d539e07036741723 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-723 Malicious code in react-advanced-breadcrumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43ca4841853fdec8c951bcbb886eb3fbf01574178c614c25db2ed6a608d31d45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-5922-1 fribidi vulnerabilities

It was discovered that FriBidi incorrectly handled the processing of input strings, resulting in memory corruption. An attacker could possibly use this issue to cause FriBidi to crash, resulting in a denial of service, or potentially execute arbitrary code. CVE-2022-25308 It was discovered that...

MAL-2023-664 Malicious code in owa-trace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2730f76c4a2f75133740b824ee87e42529cefc04f9dc35ec99403ffc56fde0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2006-2779

Mozilla Firefox and Thunderbird before 1.5.0.4 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 nested tags in a select tag, 2 a DOMNodeRemoved mutation event, 3 "Content-implemented tree views," 4 BoxObjects, 5 the XBL implementation, 6 an ifram...

SUSE CVE-2020-27820

A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose handler could happen if removing device that is not common to remove video card physically without power-off, but same happens if "unbind" the driver...

MAL-2023-690 Malicious code in postcss-file-match (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 416239cd07c736ee9cda1661d413016b66a35ccd99054f13c8fb5b81fefa02dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-758 Malicious code in sandbox-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 794308e22ed41480c05363605c926b36a0d0f31b315d2856dbe0cc66cf7e7709 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-129 Malicious code in best-man-fine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 382cd44fd0ad29485cc7b6ce261793fef72138d6695b80a6e6de9cca9d8af4e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-799 Malicious code in speedtestrun (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b100bd6200644b48f81811927710a78c261d325facb39b0425c7da01f37d6f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-900 Malicious code in tradeshift-ui-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d51029431396577ccfb0afdac8c2f5ade3ed3cbc43cbd4e81b5ca9051fccbf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-42859

Multiple issues were addressed by removing the vulnerable code. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, watchOS 9.2. An app may be able to bypass Privacy preferences...

MAL-2022-5701 Malicious code in read.node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ddf471b9c973b8f6e9dc9c46a3c4ad26c64012e45c73a8594e3a3ea0eb7b75c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...