Malicious Package

Overview web-kore-sdk is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview blockchain-explorer-sdk is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview activity-iframe-sdk is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Note: This malicious package was uncovered by o...

Security Bulletin: Vulnerability in IBM Java SDK affect IBM Tivoli Business Service Manager

Summary A vulnerability in IBM® SDK Java™ Technology Edition, Version 8 used by IBM Tivoli Business Service Manager. IBM Tivoli Business Service Manager has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2021-35550 DESCRIPTION: An unspecified vulnerability in Java SE related to th...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli Business Service Manager

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 used by IBM Tivoli Business Service Manager. IBM Tivoli Business Service Manager has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-21365 DESCRIPTION: An unspecified vulnerability in Ja...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Jan 2022 - Includes Oracle® January 2022 CPU affects IBM Tivoli Composite Application Manager for Transactions-Robotic Response Time

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7 ,version 8, that is used by IBM Tivoli Composite Application Manager for Transactions - Robotic Response Time. These issues were disclosed as part of the IBM Java SDK updates in Jan 2022. Vulnerability...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affects IBM WebSphere Application Server January 2022 CPU that is bundled with IBM WebSphere Application Server Patterns

Summary IBM WebSphere Application Server is shipped as a component of IBM WebSphere Application Server Patterns. There are multiple vulnerabilities in the IBM SDK Java Technology Edition that is shipped with IBM WebSphere Application Server. These issues were disclosed in the IBM Java SDK updates...

CVE-2022-31801 Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool

An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order to gain full control over the device...

MAL-2022-7374 Malicious code in zalopay-payment-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f2446418ad41cf8aea6d5900977109ccc23b832966a0c1d481fadf1e6f63720 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zalopay-payment-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f2446418ad41cf8aea6d5900977109ccc23b832966a0c1d481fadf1e6f63720 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gtm-tracking-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e849bf91f82dbd6013c54266e0b8ab5b8107604190298ca59817cdf94fe2aba6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3493 Malicious code in gtm-tracking-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e849bf91f82dbd6013c54266e0b8ab5b8107604190298ca59817cdf94fe2aba6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mitek-science-mweb-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a09b93f1da388cf6ad51c93c0ee3385524d3cb0f1557a6ead30db092021312d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4616 Malicious code in mitek-science-mweb-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a09b93f1da388cf6ad51c93c0ee3385524d3cb0f1557a6ead30db092021312d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nat-sdk-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27220e0118adfccf105edced03db53d2d840dd69f396c23f8fde8fca5d3072fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4784 Malicious code in nat-sdk-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27220e0118adfccf105edced03db53d2d840dd69f396c23f8fde8fca5d3072fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in facebook-nodejs-business-sdk-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8d8d81ca4b948dcfa09565e5cd03395cbd94a463bf6d49437beb32b5bb1d202 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2961 Malicious code in facebook-nodejs-business-sdk-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8d8d81ca4b948dcfa09565e5cd03395cbd94a463bf6d49437beb32b5bb1d202 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hb-analytics-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12eee3dc0ffc0d3745b6a4c59df442b805eb59386b63660250622af4f839abc5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3570 Malicious code in hb-analytics-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12eee3dc0ffc0d3745b6a4c59df442b805eb59386b63660250622af4f839abc5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...