MAL-2022-2734 Malicious code in en-task-duedate-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dceb0e887aa838ea4740189eb0143a3f4d731c251862665648424ff2a4e25e72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in en-task-duedate-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dceb0e887aa838ea4740189eb0143a3f4d731c251862665648424ff2a4e25e72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ubuntu: Security Advisory (USN-36-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-5378-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious Package

Overview rmesse-utils is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious code in rec3t-dev-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d448e9d4d5fbd9def37731a1409acb449e54c306bddb581430918e5ea7f1db44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5713 Malicious code in rec3t-dev-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d448e9d4d5fbd9def37731a1409acb449e54c306bddb581430918e5ea7f1db44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

yfmw-utils (=1.0.0) potentially affected by unknown CVE via lodash-utils (=0.0.1-security)

lodash-utils NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodash-utils and may be impacted: - yfmw-utils =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2022-4358...

MAL-2022-4358 Malicious code in lodash-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 105145df6dade13e96fad0a9e2bf958c1a6681b381296fb5d16a13426a2a9fbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE: Security Advisory (SUSE-SU-2022:2831-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for shadow-utils (EulerOS-SA-2022-2234)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for Recommended (SUSE-SU-2022:2831-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2022:2831-1 Recommended update for aws-efs-utils, python-ansi2html, python-py, python-pytest-html, python-pytest-metadata, python-pytest-rerunfailures, python-coverage, python-oniconfig, python-unittest-mixins

This update for aws-efs-utils, python-ansi2html, python-py, python-pytest-html, python-pytest-metadata, python-pytest-rerunfailures fixes the following issues: - Update in SLE-15 bsc1196696, bsc1195916, jscSLE-23972 - Remove redundant python3 dependency from Requires - Update regular expression t...

EulerOS 2.0 SP8 : shadow-utils (EulerOS-SA-2022-2234)

According to the versions of the shadow-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees CVE-2013-4235 Note that Tenable Network...

Remote Code Execution

react-editable-json-tree is vulnerable to remote code execution.The vulnerability exists in onSubmitValueParser prop which calls parse function in src/utils/parse.js because of missing sanitization of the parse parameters which allows a remote attacker to inject and execute malicious code into th...

Malicious code in wb-web-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5e1293a15057bad482e250b8319d220ae10fc426decb819d94a510c9dca1f3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7051 Malicious code in wb-web-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5e1293a15057bad482e250b8319d220ae10fc426decb819d94a510c9dca1f3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5822 Malicious code in rmesse-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95598c9e21fb55331bec7e3e8ec91ebf7174c5036d14918247fdc377c2aff6ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rmesse-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95598c9e21fb55331bec7e3e8ec91ebf7174c5036d14918247fdc377c2aff6ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6837 Malicious code in usaa-dls-build-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcc1ba2931e747b56e50e4acd7a8f7b19a8e670c5d73f5aff6eef5bc0a3803f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...