MAL-2022-1251 Malicious code in azure-arm-machinelearningexperimentation-samples-ts-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28e960d07673497cdac69a46cac88d71047e5c8b724995837b47b34b8ccc828e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-core-tracing-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 915d311a81fb12dc77bde863caaf8044744ccc476cc41476f886a9bdebb5882a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1388 Malicious code in azure-template-samples-ts-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b10d6fbf59581245f9918f3edb36dbc7879dee46d5b4d15555e411f29da0cf76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1393 Malicious code in azure-web-pubsub-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e956d8d7e58a68e8b36a47cb96133ffbe7e21026ee064193b1bb18ddb9e5c2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1300 Malicious code in azure-communication-chat-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc2fa44f3dac91a94d4ca95f9bc4c6f65554fe4cf95f81c2c61ba6a9e1463654 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1319 Malicious code in azure-cosmos-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3907287fd18d6a8ecf78ace0bdf4221c1c9d056e75c4d4c94ef1940784c2d95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in samples-web-workers-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ab462c57154f38ea0e59c31fbae08a177f4bfb366e428cba103161237fa8efa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1297 Malicious code in azure-arm-workspaces-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25fdf3e3810b11986993e1ee312d73c2be2e122399ae83f6c577f58853782c50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-dnsresolver-samples-ts-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a616354b1b2aac64d8b3bc18582cb0c0ed41bc7f2db436598b320afcab1b6aea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-containerservice-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41531b19eae64de08ead13784ade0f204bab38bd49ccb6962c6a4b94ea0aa472 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1268 Malicious code in azure-arm-policyinsights-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4017da4233cfc680669c19e9b2a102228151c27dcb181ff59a7b6ed1ecdd0f7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

0xsodium (>=0.2.0 <=0.14.0), 1password-config (=0.0.1) +11415 more potentially affected by CVE-2022-32210 via undici (>=4.9.3 <=5.4.0)

undici NPM version =4.9.3, =0.2.0, =1.0.0, =0.2.0, =0.4.0, =0.1.0, =0.0.1, =1.0.21, =2.1.0, =2.1.0, =2.1.0, =2.1.1 and more Source cves: CVE-2022-32210 Source advisory: OSV:GHSA-PGW7-WX7W-2W33...

Malicious code in vso-ts-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7d5f57e1649f3d9e39381e987554ad6c5e413545313f4ae014c2c451cd52f75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6983 Malicious code in vso-ts-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7d5f57e1649f3d9e39381e987554ad6c5e413545313f4ae014c2c451cd52f75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ts-srl.com Cross Site Scripting vulnerability OBB-2639812

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ts-jieda.com Cross Site Scripting vulnerability OBB-2639810

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Microsoft Windows TS WebProxy Directory Traversal Vulnerability

Directory traversal vulnerability in the TS WebProxy TSWbPrxy component in Microsoft Windows allows remote attackers to escalate privileges...

QNAP Urges Users to Update NAS Devices to Prevent Deadbolt Ransomware Attacks

Taiwanese network-attached storage NAS devices maker QNAP on Thursday warned its customers of a fresh wave of DeadBolt ransomware attacks. The intrusions are said to have targeted TS-x51 series and TS-x53 series appliances running on QTS 4.3.6 and QTS 4.4.1, according to its product security...

new packages: hunspell-ts

An update is available for hunspell-ts. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

Malicious code in speedy-ts-compiler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e169a7981c2abffdf7307332d399464dd770067c107f40e8a7c7b6c62fe06e3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...