Malware in upgrade-solara

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in solara-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d6e86743114e65716ebcc22493a5d16e0e807c0701cf4233fac1c9eb47f821a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in solara-config

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-11905 Malicious code in solara-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d6e86743114e65716ebcc22493a5d16e0e807c0701cf4233fac1c9eb47f821a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solara.update (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11459 Malicious code in solara.update (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solara-installer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2c4278b58b290241d9ef295a9ceda4083285189698be34585555b85f49c7918 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11458 Malicious code in solara.dll (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11457 Malicious code in solara-installer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2c4278b58b290241d9ef295a9ceda4083285189698be34585555b85f49c7918 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11456 Malicious code in solara-cleanup (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solara-cleanup (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solara-builder (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11455 Malicious code in solara-builder (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solara (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e438962687b438b87b87f8223d415da1ee3726954b8fd23aa3bb8a866f1eec0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in solara

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-10538 Malicious code in solara (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e438962687b438b87b87f8223d415da1ee3726954b8fd23aa3bb8a866f1eec0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Gamers Tricked Into Downloading Lua-Based Malware via Fake Cheating Script Engines

Users searching for game cheats are being tricked into downloading a Lua-based malware that is capable of establishing persistence on infected systems and delivering additional payloads. "These attacks capitalize on the popularity of Lua gaming engine supplements within the student gamer...

Local File Inclusion (LFI)

solara is vulnerable to Local File Inclusion LFI. The vulnerability is due to improper ../ validation within URI fragments when serving static files, which allows an attacker to manipulate the fragment part of the URI to read arbitrary files on the local file system, resulting in directory...

GHSA-9794-PC4R-438W Local File Inclusion in Solara

A Local File Inclusion LFI vulnerability was identified in widgetti/solara, in version 1.35.1, which was fixed in version 1.35.1. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '../' when serving static files. ...

Local File Inclusion in Solara

A Local File Inclusion LFI vulnerability was identified in widgetti/solara, in version 1.35.1, which was fixed in version 1.35.1. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '../' when serving static files. ...