Malicious code in nequi-api-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bf1340504c1cd5ad13f47a2e8c92aa8f58b41f2bfc9cbe68f77c055215dd9122 The OpenSSF Package Analysis project identified 'nequi-api-utils' @ 0.3.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-7925 Malicious code in nequi-api-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bf1340504c1cd5ad13f47a2e8c92aa8f58b41f2bfc9cbe68f77c055215dd9122 The OpenSSF Package Analysis project identified 'nequi-api-utils' @ 0.3.0 npm as malicious. It is considered malicious because: - The package...

abi-ds-utils (1.0.1), acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.11.0) +31 more potentially affected by CVE-2023-40273 via apache-airflow (>=2.0.0rc3, <=2.6.3)

apache-airflow PYPI version =2.0.0rc3, =0.8.44.4rc1, =0.1.0rc3, =0.2.9b1, =0.6.0, =0.2.0, =0.0.3, =0.0.6, =0.0.1, =0.0.4rc1, =0.0.0, =0.1.0, =0.2.0 and more Source cves: CVE-2023-40273 Source advisory: OSV:PYSEC-2023-158...

Malware in ent-cas-common-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in personal-profile-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5dfd44b67730d9649f2fa1cdf8999719e5f34e7e9a6b918daf0de76f176a73e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in personal-profile-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2023-1523 Malicious code in personal-profile-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5dfd44b67730d9649f2fa1cdf8999719e5f34e7e9a6b918daf0de76f176a73e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jscrambler-permission-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 131a72d7a509dfbdfaa80048c9ac64559b4f8ec25798e555ea15688529491856 The OpenSSF Package Analysis project identified 'jscrambler-permission-utils' @ 6.6.6 npm as malicious. It is considered malicious because: - Th...

CVE-2021-26505

Prototype pollution vulnerability in MrSwitch hello.js version 1.18.6, allows remote attackers to execute arbitrary code via hello.utils.extend function...

Malicious code in nequi-ci-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 48d27c14149e644219b408d1a24d84b1434d32c4d0d398bf4037d3321b078c38 The OpenSSF Package Analysis project identified 'nequi-ci-utils' @ 0.2.4 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1246 Malicious code in nequi-ci-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 48d27c14149e644219b408d1a24d84b1434d32c4d0d398bf4037d3321b078c38 The OpenSSF Package Analysis project identified 'nequi-ci-utils' @ 0.2.4 npm as malicious. It is considered malicious because: - The package...

avotes-parser-cli (>=0.0.0, <=0.4.3), avotes-parser-core (>=0.0.0, <=0.4.3) +4 more potentially affected by CVE-2023-39363 via vyper (>=0.2.15, <=0.3.0)

vyper PYPI version =0.2.15, =0.0.0, =0.0.0, =1.15.1, =0.2.1, =2.0.36, =2.1.22 Source cves: CVE-2023-39363 Source advisory: GHSA-5824-CM3X-3C38...

MAL-2023-1068 Malicious code in web3tool-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae905581e4e53e10b1d06262a96543b67f5f841e40d7723b81f455c968046cd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3tool-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae905581e4e53e10b1d06262a96543b67f5f841e40d7723b81f455c968046cd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in web3tool-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

avotes-parser-cli (>=0.0.0, <=0.4.3), avotes-parser-core (>=0.0.0, <=0.4.3) +4 more potentially affected by CVE-2023-39363 via vyper (0.2.16)

vyper PYPI version 0.2.16 is affected by a known vulnerability. The following packages have a transitive dependency on vyper and may be impacted: - avotes-parser-cli =0.0.0, =0.0.0, =1.16.3, =0.2.1, =2.0.39, =2.1.5 Source cves: CVE-2023-39363 Source advisory: OSV:PYSEC-2023-142...

avotes-parser-cli (>=0.0.0, <=0.4.3), avotes-parser-core (>=0.0.0, <=0.4.3) +4 more potentially affected by CVE-2023-39363 via vyper (>=0.2.15, <=0.3.0)

vyper PYPI version =0.2.15, =0.0.0, =0.0.0, =1.15.1, =0.2.1, =2.0.36, =2.1.22 Source cves: CVE-2023-39363 Source advisory: MEND:CVE-2023-39363...

hip-data-ml-utils (>=0.3.7, <=1.0.0), mllibprodest (>=1.5.0, <=1.5.1) +1 more potentially affected by CVE-2023-4033 via mlflow (1.29.0)

mlflow PYPI version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hip-data-ml-utils =0.3.7, =1.5.0, =0.2.33, =0.2.39 Source cves: CVE-2023-4033 Source advisory: OSV:GHSA-FFW3-6378-CQGP...

hip-data-ml-utils (>=0.3.7, <=1.0.0), mllibprodest (>=1.5.0, <=1.5.1) +1 more potentially affected by CVE-2023-4033 via mlflow (1.29.0)

mlflow PYPI version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hip-data-ml-utils =0.3.7, =1.5.0, =0.2.33, =0.2.39 Source cves: CVE-2023-4033 Source advisory: OSV:PYSEC-2023-280...

Information Disclosure

@strapi/utils is vulnerable to Information Disclosure. The vulnerability exists because the private fields are not properly handled which allows an attacker to filter the fields and gain access to sensitive information...