PT-2022-17598 · Unknown · Ts-Deepmerge

Name of the Vulnerable Software and Affected Versions: ts-deepmerge versions prior to 2.0.2 Description: The issue is related to Prototype Pollution due to missing sanitization of the merge function. This allows for potential manipulation of the prototype, leading to various security issues...

@alloyify/anvil (>=1.1.2 <=1.1.4), @alloyify/devkit (>=1.1.2 <=1.1.4) +12 more potentially affected by CVE-2022-25907 via ts-deepmerge (=2.0.1)

ts-deepmerge NPM version =2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ts-deepmerge and may be impacted: - @alloyify/anvil =1.1.2, =1.1.2, =1.1.2, =1.1.2, =0.0.0-canary-20220330074435, =0.0.0-canary-20220330074435, =5.0.24, =11.1.27, =4.0.22,...

MAL-2022-1607 Malicious code in blank-ts-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 808866413cc5af4336d9dbe301c13f13d341cc85ae096a529d10375b0245accc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blank-ts-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 808866413cc5af4336d9dbe301c13f13d341cc85ae096a529d10375b0245accc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1606 Malicious code in blank-ts-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbbaa2da3818f952bc73b9783271c529948837dd554453a3a8ccf3eecba72706 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3344 Malicious code in geoadv-ts-codegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01c47caa11253203c249aa0ca38da1140e5ef612bc4d17f527da8642a3244108 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in geoadv-ts-codegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01c47caa11253203c249aa0ca38da1140e5ef612bc4d17f527da8642a3244108 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3327 Malicious code in gen-ts-googleapis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4e25a82fd6464deed322629378691092d9c4a9c6bd5745fb9e356ab9f755031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gen-ts-googleapis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4e25a82fd6464deed322629378691092d9c4a9c6bd5745fb9e356ab9f755031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ts-genapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ba138c9b1667f78be37dab2626db52b8482ad77d8166821bebdb11dcbdbc2c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6661 Malicious code in ts-genapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ba138c9b1667f78be37dab2626db52b8482ad77d8166821bebdb11dcbdbc2c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-workers-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe40b6f18c92d30d2bc1d2dcf526a32b6db3894488c7ba9b412274573bdf4946 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7080 Malicious code in web-workers-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe40b6f18c92d30d2bc1d2dcf526a32b6db3894488c7ba9b412274573bdf4946 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-data-tables-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f12451ce5dfc182de3cf34ae16c5a54d089805c93efabed52b2ee148cd3c379d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1343 Malicious code in azure-keyvault-admin-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c6895fa55849501987a9fd8669e21d952f6d1e7aa884e5184c0d6858d12dd33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-agrifood-farming-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 389753c632d882662d94001f13cd022e978b7430f4534f1878a3610dd5f0e5e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1223 Malicious code in azure-agrifood-farming-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 389753c632d882662d94001f13cd022e978b7430f4534f1878a3610dd5f0e5e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1309 Malicious code in azure-confidential-ledger-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d670e394d24ec41bc269868b666ded7112cb794ac280f1a6ed52c2291fab5d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-digital-twins-core-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cb01f6204ef9ebbd8f601e77eb1b5e3300c08ee711a6e192cde3a8e7bfa6024 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1312 Malicious code in azure-container-registry-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bef553c368f9ac9f7c664a2c978dce89988d424608b5f5b47010261ee7a9ee9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...