Malicious code in morpho-token (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55f3ec7e427f04c94877dd7cda6c4683901ede352cb5946fa52448af8246dfaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3583 Malicious code in headless-obyte (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23a746248cdd3fa9fc000729a31a09edc3476b4ad4cbdec19c121fb0ca07fb77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4304 Malicious code in lido-cosmos-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91c734ea9798aa522386257ac88af574161a623f65bb9aa4931503a3b2d26bb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1028 Malicious code in anyswap-rewards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2674d4a9f2b88faff228dfafb46dbd6981ccc600d7bdd4e70325623c5cf05a10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1206 Malicious code in axelar-signing-relayer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1e055dcb45cb56b60eef5249acdc3ed71a7eea55bf8e7e10ca3875941f005b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4228 Malicious code in ks-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17f45ba64efd280166d92cd3cbae66211e667608660eea775f6b2c6fad385e0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ks-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17f45ba64efd280166d92cd3cbae66211e667608660eea775f6b2c6fad385e0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2503 Malicious code in discord.js-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62488af56327cd0a22202bb93f65eff0b4070ab64d1c9a6197f8030c66504bf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1039 Malicious code in api-discord.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4f7f7ecc3e9129636b48c01db1cb07395f0874ce212c8ad5789813123558f78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2497 Malicious code in discord.js-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8540a7a2f8830a279ceef3df3b67be2f9f9fc49b5a20fae5000a5caf839288a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in capitain-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a75b2ce6eaabce715f2a5a587ac91d0a395294ce7647cf6d0d1eb2d6e088a89 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2512 Malicious code in discord.js-selfbot-v12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1ea862e1247c0db67057d25b3765d9648b353aa808909a5faee62d64c657082 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Authorization

FlyteAdmin is the control plane for Flyte responsible for managing entities and administering workflow executions. In versions 1.1.30 and prior, authenticated users using an external identity provider can continue to use Access Tokens and ID Tokens even after they expire. Users who use FlyteAdmin...

CVE-2022-31145

Summary: CVE-2022-31145 concerns FlyteAdmin's validation of access/tokens. In versions up to 1.1.30, authenticated users with external identity providers can continue to use Access Tokens and ID Tokens after expiry. The issue does not affect users configuring FlyteAdmin as the OAuth2 Authorizatio...

MAL-2022-923 Malicious code in ajaxapis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7785c67e01de40f97f2bac6f29dc7f4b89374ff8ae9b5dc2b166f9edd9104bb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in waffles-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1844bfb21f9898d69137bb315c2e9bfb2b07a27b55a5c8962b152f8df216f980 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ckvmqjksghytofel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 418c8ec2390c0ae00ab93c6cd711d9cdd00232125f519b470ecf9b4b929df596 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7277 Malicious code in xhnedzawcukgpfjv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a39821ab671a48b431878eb07bed325ec12db5a013141dcb24c567dd7047a610 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6236 Malicious code in spkndrbxkzghiyqf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89f4ff2b8d385e4b57c081672af439ddc367724bd0f40edd5786243e8313f628 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4985 Malicious code in nxvjhmdetwglsfry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef2b660f9ce431741260beef60a75b7d64d4f4cec16c3fa5fcdac3b7e0e3598e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...