MAL-2022-6896 Malicious code in vc-modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e43172fb253330392351dc3f66a6cc9263fc963e180e628d56596e60bd25aa18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4598 Malicious code in miniapp-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e036790235d17ef2b3d0cc2df5f8994a1bcbb19c06da8fcdeda2f7433621ff74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4223 Malicious code in krew-installer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d05c9eed8b2219e5f2530bd892f00c18eab8bfc6f32a1065a0d73be249649498 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-133 Malicious code in @bmw-chris/signalr-default-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55f1ea95b0dd1fab3c5fd07a895d013eadc38233dd31acbf4d5640965da83210 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1841 Malicious code in cashapp-referral-code-hakc-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1aabf0eb5dcedf4bd0f44edeea90c89694e5e579cce534cdee53358059d1547b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1662 Malicious code in boxworker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02747733bd9b1215bc7afa277d0a91baf4a9d74e3b1ddc5803eb8a5dcae0f716 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-996 Malicious code in angara.tablejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb704356644cb89c0c8f006f74249d4c9f4aa5961123223595ec6253d7cf24be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2934 Malicious code in ext-iconv-test-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca41764ebc9b23bb68e27f052f70923177485babd831d5ea16ba901143a16926 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6599 Malicious code in token-allocation-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e70d4e91a48867bcbc30b11c2c29639e0305bff138d5414dcac1754ffbdaf6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3324 Malicious code in gemini-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b418d8d156c996e8480d030038ac49e278a763b402c5de57377ea229dd975ee7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3441 Malicious code in gradient-stringss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57723e32d648c25724e92b0bae70a4858b05de601bcd3c204359d4c4ca01286f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1118 Malicious code in arm-webpubsub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8aac1500670053716d68236df4a067c1c61d5f738115c3e28fb26d2cb60d8776 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1247 Malicious code in azure-arm-iothub-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2055f5a818e85c0ecd2535a9562bb6be98d4e71635f36b668f006e7ab1c5f75d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1291 Malicious code in azure-arm-storagesync-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1efed359b2d3c2ddec29f9ba9698a370e4af0ec65ebdd4a0f5a4c7d553b57ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4190 Malicious code in klook-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5540e1613f2ea5571b22d8081b140c6e8296528143e91df97084ae8010fe2ecb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-594 Malicious code in @smartsteuer/solo-vue-heroicons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a7f8d7c995f4d1317b54aeda33969524c95b75fde0eab05f441a75130a8a32a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2297 Malicious code in cxd-npm-releases (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 653b5a7e3454cc87a99ebf066a86cab23a1999ba37b0cb45700df4448ebeaeef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Path Traversal

@backstage/plugin-techdocs-node is vulnerable to Path Traversal. The vulnerability exists in local.ts because of register entities not properly validated which allows to attacker to write malicious files in the system...

MAL-2022-7002 Malicious code in vuestic-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39a046686c53378bb9efc79eca87d4c90700e4b3e1d8dacaf0f82186f03e0d3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Securing the software supply chain, with Kim Lewandowski: Lock and Code S03E13

At the start of the global coronavirus pandemic, nearly everyone was forced to learn about the "supply chain." Immediate stockpiling by an alarmed and from a smaller share, opportunistic public led to an almost overnight disappearance of hand sanitizer, bottled water, toilet paper, and face masks...