Malicious code in aou-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 14d557b38b0c01886a47e3e3a39e8f10cb4b839ba9541d49e129c75ad18755ae The OpenSSF Package Analysis project identified 'aou-ui' @ 0.0.3 npm as malicious. It is considered malicious because: - The package communicate...

CVE-2024-42488 vulnerabilities

Vulnerabilities for packages: hubble-ui, hubble, hubble-ui-backend-fips...

Malicious code in @caesars-digital/caesars-ui (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in rcmp-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd2e4c37beba24789d3b9cac30f99076caa9c503372266d318c8ec29d31abdaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3494 Malicious code in gtt-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b42aef4069cb8806319318b7e928a0f8bbf17465676103c8e2fedefd6426578f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in visitor-ui-component-library-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a49ce3e79a28efd550ad3f4e2395fef81eb43c22efdaf89af060d89fd4649e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-367 Malicious code in @iwcp/nebula-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46e24fcc1ba62a0b1cb165fdc4b1075ef12d23d1cf279ec8a71caff22937949b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-24709 Cross site scripting in @awsui/components-react

@awsui/components-react is the main AWS UI package which contains React components, with TypeScript definitions designed for user interface development. Multiple components in versions before 3.0.367 have been found to not properly neutralize user input and may allow for javascript injection. Use...

Resources Downloaded over Insecure Protocol

Overview Affected versions of igniteui download Javascript and CSS resources over an unencrypted HTTP connection. An attacker with a privileged network position can intercept and view or modify any content sent or recieved over an unencrypted HTTP connection. Recommendation The igniteui package h...