MAL-2023-764 Malicious code in sdc40_yamatake_manual_gi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9340e2ff538d820e82c4609b9b0033a3222f425183f5c83d6a525a01e93529b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-512 Malicious code in ic_27_health_insurance_pdf_h2g28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cb2bdd6c456d0912ef78783cffe44a295776db00cc6fad2885922da5ab5be27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-670 Malicious code in pcorbr-ui-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42c2ab222c8542659c5bf7b3e2daeea4be95818c1e0d0c186b7bce8abfa462a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-760 Malicious code in santander-portal-node-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d1fb57cea3e1f21e52c22b2fb33191996e04c3aef96c7b9cf1fc6184b6d0883 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-769 Malicious code in sendgram (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd1d8d9e7fe2d4bb63225ef26a1816cb63b8e72a92666345be028bff4abf77fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-289 Malicious code in dreamteam11-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f760fb2e0f1f22f54f8e0db3457dc3a9ca3d481b743d22df2ebefc64619b7284 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in capfb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 266decd2f38301f7ec288850e068420e62cd39a10c8de6f6923d19e19c61a652 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-468 Malicious code in gd-apply (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28fa196d02660fc75efc9c71f8cf8ee2ddc35286c432de6b7aa4f801a00a0013 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-56 Malicious code in @sok-brand-sites/common-frontend-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f4c8c64db834f3a9d141af04ecce73e9a889fadbcdb655db23b07c73e2a6145 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-848 Malicious code in teams-calendar-webpart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4407eeb60493ba69d7ef590b289a23d09231c321ce9840fe680bc0a0709be8a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-187 Malicious code in cms-businesslogic-extensions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a0524578c578563fb6702db75acc506cf100762a285f1b536add61f45b4e020 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-723 Malicious code in react-advanced-breadcrumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43ca4841853fdec8c951bcbb886eb3fbf01574178c614c25db2ed6a608d31d45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-435 Malicious code in fe-core-components-vuejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d60e569c72a226b7f460fd4ee1792523d0c53a9206b27aef9a6d2774378754ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2019-11323

HAProxy before 1.9.7 mishandles a reload with rotated keys, which triggers use of uninitialized, and very predictable, HMAC keys. This is related to an include/types/sslsock.h error...

MAL-2023-4 Malicious code in eslint-plugin-dropbox-sign (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef0b78a956b34b6e0c3db65f1f623e28b0e80753ffae8ea19c75e4217f1dc0b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-65 Malicious code in @superbet-group/web.lib.vue-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0177c1a71b6ddf84d3b320b15eb180edf94406c0f6a4f07ad0b4ca33fcbb52fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-66 Malicious code in @superbet-group/web.types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3a0aaf7c7b5a8aedf6bc88f0778aee51462546adb577e4116a18d36d41462d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-34 Malicious code in @chegg/wtai-upload-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed3e4233e6f2d188d7f2bab940bf8574017cf73a97b440daddc7f4e3176075a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured

Summary A vulnerability in Boundary was identified such that when a Key Management Service KMS was defined in Boundary’s configuration file with the intent of using the KMS to encrypt the credentials stored on disk, new credentials created after an automatic rotation may not have been encrypted v...

MAL-2023-377 Malicious code in fca-anjelo-pogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2b501824b5dfb70ce9396faf12349f9d1090598f9297bd2c9a727ba1fd02a92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...