MAL-2023-1516 Malicious code in ent-cas-common-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5431a932c9fdc7650aac9d95765b694034048878e15c4d0a97942d49eac96f05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1458 Malicious code in dependency-exploit-corraldev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3895d5ad9c43461c05e02f878b4bf13a8920b760d569e998be72839879492e30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in srm-front-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c469dee4624e4b88565a73ec5ed2d02e175984dc96436647b3b2e5145daffd3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Researchers Uncover Years-Long Cyber Espionage on Foreign Embassies in Belarus

A hitherto undocumented threat actor operating for nearly a decade and codenamed MoustachedBouncer has been attributed to cyber espionage attacks aimed at foreign embassies in Belarus. "Since 2020, MoustachedBouncer has most likely been able to perform adversary-in-the-middle AitM attacks at the...

MAL-2023-141 Malicious code in braze-webpack-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc71db731ac5e637112dcd53e9aef14f68b79db997c03e693ec04014b9178c76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-420 Malicious code in fca-sasuke (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c44b34dea13379d08b83677880882b4e10ce40af22770d19543f624e607d4e19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-568 Malicious code in literal-fs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a6301bbe43b32cb4560eeb8b8cf7525ae5d1e18f851406ee8d72a4dcd0eb494 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Design/Logic Flaw

IBM Cognos Analytics on Cloud Pak for Data 4.0 could allow an attacker to make system calls that might compromise the security of the containers due to misconfigured security context. IBM X-Force ID: 251465...

MAL-2023-23 Malicious code in @ans-exam/client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1b89ea0770827099ee6eb05d0c0345dbf2c9318531d99794a8121609dea1d43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

IDOR in message deletion

Description user can delete others's message. we know the report https://huntr.dev/bounties/24ae402f-220f-41c6-962e-47c26938986e/ , but we find that we do not fix one case. Proof of Concept 1 user1 send admin a greeting card1 2 user2 send admin a greeting card2 3 user1 delete his message related ...

Malicious code in fc-scroll (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7f4167da0bf5409b53f5b683dcdb962d93b6d03e2d9e3916c5859f78f8f9f1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-363 Malicious code in fc-phone-number (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec30fba8ba38ae5e354c219234fb4dd78d71537718394caf3d584e896c5b0a42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-342 Malicious code in fc-date (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d8d6bb92a710835f8785839506932483d23f3a9efba0b3a5ac06dec1c2b133a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in planetbuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 714442275b43592301580a64cbed17b16de57601a71b3e5c3b3c37222a587ee3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-39 Malicious code in @leanmull/leveldb-decryptor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2a49cf8566f61f2b84921d8974682c4a4f9b1c7dab8a9aa51e7c5bce180f451 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-156 Malicious code in calandraca (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1ad519637712e055bfbbd5ac5064a17cf750fa0f3df7be9c15075849ea8104c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-282 Malicious code in dow-load-the-idea-of-you-by-robinne-lee-on-audiobook-full-volumes- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4655dddb557aca9471834ace6307c0d91fb43b7a462099e53022715193df82f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-244 Malicious code in der_zahlenteufel_enzensberger_pdf_free_hot__760 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f6a62f3125320f39115c74c9e81c5d4910fd823043cac3404d56b551a8fef18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-104 Malicious code in apnic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1754bbb2103752ba95bc70121a835e6e84cccad0943712386bbb399e5e6761d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-862 Malicious code in tetete12312 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31a599485f0fdc009bb5be306d1bf977208f01e4508ca170506ee0144aa6f9bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...