Malicious code in @aszxc/npmexp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab85bce5e9320af8931b9f78df12a6100f617489104954c09d31741851602bf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: Mitigations are being announced to address CVE-2020-4839 and CVE-2021-29695

Summary IBM products 8335-GCA, 8335-GTA, and 8335-GTB have identified security vulnerabilities. Vulnerability Details CVEID:CVE-2020-4839 DESCRIPTION: IBM Host firmware for LC-class Systems is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A remote privileged...

MAL-2022-5114 Malicious code in opy-wepback-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0779d4a870d9770efbfaba7658ea8582d5ae3023a91fa9a0ccdbe5483daf414b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4797 Malicious code in nedemqiler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2788c34504c4a52ba0cfc8adca81a433683ca4c1ba46465879154eccb845c1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1572 Malicious code in bignumbnev.jr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c95e2b5477e4e9220d07f8dcfc6a655dd211cf9b3c68eeb3aaf5cdf9a09eb6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3exprem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 252908f80d8eff01a9d51b3bf56b78fced88d7c7ef0030fd6daeceef3d1d5a62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lodastdefaults (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f527912f4ca74a298e0ecb11a1bd37dd4956495493652f1bfc280ed59431c41c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fuirebagseadmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32f17847db0ad2df972b996bae94ebf155fcb4bbbba3e23aa23987ce8ca85823 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2245 Malicious code in crosse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2abc10fe50429ed3ede3fe0efbb03a6a8ae7e2bad45a73b00a2b5f9a4d54af57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1018 Malicious code in ansiescapeks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a1633640448675746fb9efe81a2c89a8f87d0919652f8dda4edba0ca668b0ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7136 Malicious code in whevent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 381abfc1981a4deb39aee2d7d2435a396a738d8ab2c7e86d619c4c55f252c1d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lwc-playground (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98e335481687ce6c9f293923692ec4f19da6a49f4d5fe8c014625761fe5a23cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-902 Malicious code in ai-image-tagging-lambda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec8ef7b0545eaa94432484debf73c757fbdcb6c21231a5a250f30afac3c5a8eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GSD-2022-1004799 cgroup: Use separate src/dst nodes when preloading css_sets for migration

cgroup: Use separate src/dst nodes when preloading csssets for migration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.253 by commit...

GSD-2022-1004710 cgroup: Use separate src/dst nodes when preloading css_sets for migration

cgroup: Use separate src/dst nodes when preloading csssets for migration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.207 by commit...

GSD-2022-1004585 cgroup: Use separate src/dst nodes when preloading css_sets for migration

cgroup: Use separate src/dst nodes when preloading csssets for migration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.132 by commit...

GSD-2022-1004413 cgroup: Use separate src/dst nodes when preloading css_sets for migration

cgroup: Use separate src/dst nodes when preloading csssets for migration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.56 by commit...

GSD-2022-1004197 cgroup: Use separate src/dst nodes when preloading css_sets for migration

cgroup: Use separate src/dst nodes when preloading csssets for migration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...

Malicious code in promoaline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc5346dc9691cc6e2403841237cbb3e4d3caf9ab5bd91c266ebe4fa9cfc2491e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kmauqkvxzsgifpbj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13bd0d5ed37547a70635cd57a9e6d88220e552bc9eff761922713d585cecd655 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...