MAL-2023-8294 Malicious code in f0-normalizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59555a81498457e7dd566cb779db13702f1f1672fc7755c89cbb11a6c2d898b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8199 Malicious code in @zettle-bo/inventory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6262bbe576936f351b23ae859a7a6109329ac53866ece0189c1a9feee444159 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8193 Malicious code in @zettle-bo/capital (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0edefc32682a93278a1161ed28b71422f389e6192c800c17cd48030832f50e12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8179 Malicious code in jake-horizon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b68dd08145ebfefd1660159fac302e02d16e89fe9c227d0bb307daa8c5ed05a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8137 Malicious code in hadhat-contract-sizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e131621ed622d7b0a41682544817ba31d5fd500da9d38ae5b9404e43d76740b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8112 Malicious code in producer-journey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b44a983bac4bf4a84c490b2164cbf0dddd7dadf964ab05e400ae579c5c8c50b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chain-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe5c6ddc619ecf45531efce44ef718865eb6f689b196a3ea770934897790c4b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in frontend-effect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f99fca2bf58d400b4cf4e469118f0ff61967c8a4e29d0ec247501cf57a978428 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1516 Malicious code in ent-cas-common-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5431a932c9fdc7650aac9d95765b694034048878e15c4d0a97942d49eac96f05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1458 Malicious code in dependency-exploit-corraldev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3895d5ad9c43461c05e02f878b4bf13a8920b760d569e998be72839879492e30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in srm-front-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c469dee4624e4b88565a73ec5ed2d02e175984dc96436647b3b2e5145daffd3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Researchers Uncover Years-Long Cyber Espionage on Foreign Embassies in Belarus

A hitherto undocumented threat actor operating for nearly a decade and codenamed MoustachedBouncer has been attributed to cyber espionage attacks aimed at foreign embassies in Belarus. "Since 2020, MoustachedBouncer has most likely been able to perform adversary-in-the-middle AitM attacks at the...

MAL-2023-141 Malicious code in braze-webpack-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc71db731ac5e637112dcd53e9aef14f68b79db997c03e693ec04014b9178c76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-420 Malicious code in fca-sasuke (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c44b34dea13379d08b83677880882b4e10ce40af22770d19543f624e607d4e19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-568 Malicious code in literal-fs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a6301bbe43b32cb4560eeb8b8cf7525ae5d1e18f851406ee8d72a4dcd0eb494 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Design/Logic Flaw

IBM Cognos Analytics on Cloud Pak for Data 4.0 could allow an attacker to make system calls that might compromise the security of the containers due to misconfigured security context. IBM X-Force ID: 251465...

MAL-2023-23 Malicious code in @ans-exam/client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1b89ea0770827099ee6eb05d0c0345dbf2c9318531d99794a8121609dea1d43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

IDOR in message deletion

Description user can delete others's message. we know the report https://huntr.dev/bounties/24ae402f-220f-41c6-962e-47c26938986e/ , but we find that we do not fix one case. Proof of Concept 1 user1 send admin a greeting card1 2 user2 send admin a greeting card2 3 user1 delete his message related ...

Malicious code in fc-scroll (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7f4167da0bf5409b53f5b683dcdb962d93b6d03e2d9e3916c5859f78f8f9f1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-363 Malicious code in fc-phone-number (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec30fba8ba38ae5e354c219234fb4dd78d71537718394caf3d584e896c5b0a42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...