GHSA-9VRM-V9XV-X3XR HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured

HashiCorp Boundary from 0.10.0 through 0.11.2 contain an issue where when using a PKI-based worker with a Key Management Service KMS defined in the configuration file, new credentials created after an automatic rotation may not have been encrypted via the intended KMS. This would result in the...

HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured

HashiCorp Boundary from 0.10.0 through 0.11.2 contain an issue where when using a PKI-based worker with a Key Management Service KMS defined in the configuration file, new credentials created after an automatic rotation may not have been encrypted via the intended KMS. This would result in the...

MAL-2023-160 Malicious code in carbon-sageone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1dd56dd7300d3e57844b0cda4d9223dc1874d2e0db91e2308fd11ff2ac5a2d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-215 Malicious code in criteo-static-variables-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65ae832c9a084b0c39c57bf3bb68ff1877e5f1370b9c29e564368e0a2d224d9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-107 Malicious code in assets-graph (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e513e7556846ca62fa4d27646eef928d55f2c2954ce9caa51dd63643e2adf445 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-23 Malicious code in @ans-exam/client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1b89ea0770827099ee6eb05d0c0345dbf2c9318531d99794a8121609dea1d43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-154 Malicious code in cache-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 09ed266927720d6a151d6cca346f684f5e326b246a5363157496f6840d3be5f3 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-296 Malicious code in dvknpm-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 699740896647f6c3926d3579cb62aaf2d4cb804f000f96f4ad3d049f5c176b13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-755 Malicious code in sample-app-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a7432b767dd8bf532a686b3a40add828170682af3dcfdcab09c7d7a012a83e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-374 Malicious code in fc-transactions-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b4aa758a82c1ef95eb8cec01a5206c1000e9ae259eab65eac788bb629690c5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-357 Malicious code in fc-mijn-menu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1239e10e2e52412b4a13dac91c28d9b96d0b6d6e79213b3d9a80d394f8e768f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-337 Malicious code in fc-content (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f572d0c49001777d7ebfe2df3171692e6f0cc1814541312cfb9b2adbbb0c6335 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-437 Malicious code in fi-accounts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1387fb3ffd020ecb98336cda31726c3a524b418222999805b2f2fc75f23040c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-609 Malicious code in multivariate-experiments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43ad874c630ddc5086d622b1f450560f76c8b2d874591884b3265450f0aad747 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-708 Malicious code in pruebalol1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cf513acc5df2380e286ca7e3d2c858c9c876dd21e8cd65607881d2c3072f75e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-682 Malicious code in pitito (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c402c7c9c4bff455910dd1b71d4c8d9cb7e47b0daa68d4d68eedf1649965afb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-305 Malicious code in elpititaso (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4019ca714f55ff1cca1bcbbecdcb1a7e49d7f9474ac21b97d38672f285bb17b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-77 Malicious code in actblue-contributions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe5c0c6e92bdaf9e2ee8c02ef7116bf05898e212a64ff12c21e8990a350ee768 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-555 Malicious code in killers-of-the-flower-moon-by-david-grann-on-textbook-full-pages- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c27cf5abe4329f4754ed7ee8d2f4e5cced0e6a2715c0958a97773a4abef43ba7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-675 Malicious code in pdf-gods-generals-the-military-lives-of-moses-the-buddha-and-muhammad-by-richard-a-gabriel-on-textbo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7223bae13fe1842ac33d55f756c21e34203b329491ad0de92c26aa7f023908b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...