@ansdomain/react-ans-address (>=0.0.31, <=0.0.32), @ansdomain/ui (>=3.8.0, <=3.8.771) +94 more potentially affected by CVE-2023-38698 via @ensdomains/ens-contracts (>=0.0.2, <=0.0.21)

@ensdomains/ens-contracts NPM version =0.0.2, =0.0.31, =3.8.0, =0.3.0-alpha, =1.2.0, =0.0.1, =0.0.1, =2.1.7, =3.4.2, =0.0.1, =3.4.5, =3.0.0-alpha.3, =2.2.2, =1.0.0, =1.0.0, =2.1.0 and more Source cves: CVE-2023-38698 Source advisory: OSV:GHSA-RRXV-Q8M4-WCH3...

@pnpm/exe (>=8.0.0-alpha.0, <=8.6.7) potentially affected by CVE-2023-37478 via @pnpm/linux-x64 (>=8.0.0, <=8.6.7)

@pnpm/linux-x64 NPM version =8.0.0, =8.0.0-alpha.0, =8.6.7 Source cves: CVE-2023-37478 Source advisory: OSV:GHSA-5R98-F33J-G8H7...

@pnpm/exe (>=8.0.0-alpha.0, <=8.6.7) potentially affected by CVE-2023-37478 via @pnpm/win-x64 (>=8.0.0, <=8.6.7)

@pnpm/win-x64 NPM version =8.0.0, =8.0.0-alpha.0, =8.6.7 Source cves: CVE-2023-37478 Source advisory: OSV:GHSA-5R98-F33J-G8H7...

ynpm-tool (>=4.0.5-pnpm.15, <=5.5.11) potentially affected by CVE-2023-37478 via pnpm (>=7.2.1, <=7.5.1)

pnpm NPM version =7.2.1, =4.0.5-pnpm.15, =5.5.11 Source cves: CVE-2023-37478 Source advisory: OSV:GHSA-5R98-F33J-G8H7...

@pnpm/exe (>=7.0.0-alpha.0, <=7.33.3) potentially affected by CVE-2023-37478 via @pnpm/linux-x64 (>=7.0.0, <=7.33.3)

@pnpm/linux-x64 NPM version =7.0.0, =7.0.0-alpha.0, =7.33.3 Source cves: CVE-2023-37478 Source advisory: OSV:GHSA-5R98-F33J-G8H7...

@pnpm/exe (>=7.0.0-alpha.0, <=7.33.3) potentially affected by CVE-2023-37478 via @pnpm/win-x64 (>=7.0.0, <=7.33.3)

@pnpm/win-x64 NPM version =7.0.0, =7.0.0-alpha.0, =7.33.3 Source cves: CVE-2023-37478 Source advisory: OSV:GHSA-5R98-F33J-G8H7...

@pnpm/exe (>=7.0.0-alpha.0, <=7.33.3) potentially affected by CVE-2023-37478 via @pnpm/macos-arm64 (>=7.0.0, <=7.33.3)

@pnpm/macos-arm64 NPM version =7.0.0, =7.0.0-alpha.0, =7.33.3 Source cves: CVE-2023-37478 Source advisory: OSV:GHSA-5R98-F33J-G8H7...

@pnpm/exe (>=8.0.0-alpha.0, <=8.6.7) potentially affected by CVE-2023-37478 via @pnpm/macos-arm64 (>=8.0.0, <=8.6.7)

@pnpm/macos-arm64 NPM version =8.0.0, =8.0.0-alpha.0, =8.6.7 Source cves: CVE-2023-37478 Source advisory: OSV:GHSA-5R98-F33J-G8H7...

@pnpm/exe (>=8.0.0-alpha.0, <=8.6.7) potentially affected by CVE-2023-37478 via @pnpm/linux-arm64 (>=8.0.0, <=8.6.7)

@pnpm/linux-arm64 NPM version =8.0.0, =8.0.0-alpha.0, =8.6.7 Source cves: CVE-2023-37478 Source advisory: OSV:GHSA-5R98-F33J-G8H7...

@pnpm/assert-project (>=0.0.0-20230605-20230605142810, <=2.3.28), @pnpm/assert-store (>=1.0.59, <=1.0.63) +41 more potentially affected by CVE-2023-37478 via @pnpm/cafs (>=7.0.0, <=7.0.4)

@pnpm/cafs NPM version =7.0.0, =0.0.0-20230605-20230605142810, =1.0.59, =2.0.0, =18.0.0, =0.0.0-20230605-20230605142810, =4.0.0, =12.0.0, =7.0.0, =6.0.0, =0.0.0-20230605-20230605142810, =0.0.0-20230605-20230605142810, =0.0.0-20230605-20230605142810, =0.0.0-20230605-20230605142810,...

@pnpm/exe (>=7.0.0-alpha.0, <=7.33.3) potentially affected by CVE-2023-37478 via @pnpm/linux-arm64 (>=7.0.0, <=7.33.3)

@pnpm/linux-arm64 NPM version =7.0.0, =7.0.0-alpha.0, =7.33.3 Source cves: CVE-2023-37478 Source advisory: OSV:GHSA-5R98-F33J-G8H7...

@ckies/cli (>=0.0.2, <=0.0.4), @crawless/utils (>=1.0.0, <=1.0.24) +82 more potentially affected by CVE-2023-26139 via underscore-keypath (>=0.0.15, <=0.9.3)

underscore-keypath NPM version =0.0.15, =0.0.2, =1.0.0, =0.1.1, =0.0.1, =1.0.1, =1.2.0, =1.0.2, =1.0.0, =1.457.521, =0.0.1, =0.0.1, =1.0.0 and more Source cves: CVE-2023-26139 Source advisory: OSV:GHSA-GPVC-MX6G-CCHV...

anchor-client (0.26.0), basejmp (0.1.0) +226 more potentially affected by unknown CVE via dlopen_derive (0.1.4)

dlopenderive CARGO version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on dlopenderive and may be impacted: - anchor-client 0.26.0 - basejmp 0.1.0 - bonfida-test-utils 0.1.0 - bonfida-utils =0.2.3, =0.2.0, =0.14.0, =0.1.0, =0.1.0, =0.29.0, =0.1....

kyc3-sdk (>=0.1.0, <=0.1.1) potentially affected by unknown CVE via ethersjs (0.0.1-security)

ethersjs NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on ethersjs and may be impacted: - kyc3-sdk =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2023-315...

Malicious code in very-bad-transitive-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a9acc8ba367a82af4fdbd34224c7bd392db0ce1df3885c0b4ff0de151e2baac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@christianhugo/mobile-builder (0.7.3-beta.3), @saltcorn/mobile-builder (>=0.7.2-beta.6, <=0.7.3-beta.3) potentially affected by unknown CVE via @saltcorn/cli (>=0.7.2, <=0.7.3-beta.3)

@saltcorn/cli NPM version =0.7.2, =0.7.2-beta.6, =0.7.3-beta.3 Source cves: unknown CVE Source advisory: OSV:GHSA-WXF3-4FVJ-VQQX...

sails-hook-api-version-accept (0.1.0), sails-hook-route (>=0.0.1, <=0.0.4) potentially affected by CVE-2023-38504 via sails (>=1.0.1, <=1.0.3-2)

sails NPM version =1.0.1, =0.0.1, =0.0.4 Source cves: CVE-2023-38504 Source advisory: OSV:GHSA-GPW9-FWM8-7RX7...

@antgineering-studio/strapi (4.5.5), @chargeover/strapi (0.0.1-rc1.1) +100 more potentially affected by CVE-2023-34235 via @strapi/utils (>=4.0.0, <=4.10.7)

@strapi/utils NPM version =4.0.0, =1.0.0, =1.3.0, =1.4.1 - @codeparticle/strapi-plugin-graphql 4.9.2 and more Source cves: CVE-2023-34235 Source advisory: OSV:GHSA-9XG4-3QFM-9W8F...

@antgineering-studio/strapi (4.5.5), @chargeover/strapi (0.0.1-rc1.1) +43 more potentially affected by CVE-2023-34235 via @strapi/database (>=4.0.0, <=4.10.7)

@strapi/database NPM version =4.0.0, =1.0.0, =1.3.0, =1.3.4, =1.2.1, =4.2.0, =4.2.2, =4.9.2, =4.9.2, =1.0.5, =2.0.13 and more Source cves: CVE-2023-34235 Source advisory: OSV:GHSA-9XG4-3QFM-9W8F...

@antgineering-studio/strapi (4.5.5), @chargeover/strapi (0.0.1-rc1.1) +43 more potentially affected by CVE-2023-34093 via @strapi/database (>=4.0.0, <=4.10.7)

@strapi/database NPM version =4.0.0, =1.0.0, =1.3.0, =1.3.4, =1.2.1, =4.2.0, =4.2.2, =4.9.2, =4.9.2, =1.0.5, =2.0.13 and more Source cves: CVE-2023-34093 Source advisory: OSV:GHSA-CHMR-RG2F-9JMF...