4 matches found
Malware in tellyo-colours
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
tellyo-colours (>=21.3.1, <=101.3.6), tostpro (>=100.7.0, <=112.5.9) potentially affected by unknown CVE via abbishal-poc-as-dependency (1.3.1)
abbishal-poc-as-dependency NPM version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on abbishal-poc-as-dependency and may be impacted: - tellyo-colours =21.3.1, =100.7.0, =112.5.9 Source cves: unknown CVE Source advisory: GHSA-M26X-98MG-QXV9...
tellyo-colours (>=21.3.1, <=101.3.6), tostpro (>=100.7.0, <=112.5.9) potentially affected by unknown CVE via abbishal-poc-as-dependency (1.3.1)
abbishal-poc-as-dependency NPM version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on abbishal-poc-as-dependency and may be impacted: - tellyo-colours =21.3.1, =100.7.0, =112.5.9 Source cves: unknown CVE Source advisory:...
tellyo-colours (>=21.3.1, <=101.3.6), tostpro (>=100.7.0, <=112.5.9) potentially affected by unknown CVE via abbishal-poc-as-dependency (1.3.1)
abbishal-poc-as-dependency NPM version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on abbishal-poc-as-dependency and may be impacted: - tellyo-colours =21.3.1, =100.7.0, =112.5.9 Source cves: unknown CVE Source advisory: OSV:MAL-2026-17653...