Malicious Package

Overview migrate-ux-react is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

@toggled-apps/react-native-collapsible-scroll (>=1.0.0 <=1.0.2), @toggled-apps/react-native-product-carousel (=1.0.3) +9 more potentially affected by CVE-2022-24373 via react-native-reanimated (>=2.0.0-rc.0 <=2.0.1)

react-native-reanimated NPM version =2.0.0-rc.0, =1.0.0, =1.0.0, =41.0.0, =41.0.0, =1.0.0, =1.1.0, =1.1.2 - ui-ux =0.0.1 Source cves: CVE-2022-24373 Source advisory: SNYK:JS-REACTNATIVEREANIMATED-2949507...

CVE-2022-28623

Security vulnerabilities in HPE IceWall SSO 10.0 certd could be exploited remotely to allow SQL injection or unauthorized data injection. HPE has provided the following updated modules to resolve these vulnerabilities. HPE IceWall SSO version 10.0 certd library Patch 9 for RHEL and HPE IceWall SS...

CVE-2022-28623

Security vulnerabilities in HPE IceWall SSO 10.0 certd could be exploited remotely to allow SQL injection or unauthorized data injection. HPE has provided the following updated modules to resolve these vulnerabilities. HPE IceWall SSO version 10.0 certd library Patch 9 for RHEL and HPE IceWall SS...

Sql injection

Security vulnerabilities in HPE IceWall SSO 10.0 certd could be exploited remotely to allow SQL injection or unauthorized data injection. HPE has provided the following updated modules to resolve these vulnerabilities. HPE IceWall SSO version 10.0 certd library Patch 9 for RHEL and HPE IceWall SS...

CVE-2022-28623

HPE IceWall SSO 10.0 certd library contains a remote SQL injection/unauthorized data injection vulnerability (CVE-2022-28623). The issue affects the certd component and is mitigated by Patch 9 for both RHEL and HP-UX releases.

Malicious code in gs-ux-uitoolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aab9fe73d37cb4b732778f9fdb58a7bf3024a0deb825bf1d5bf7169bac5988f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3490 Malicious code in gs-ux-uitoolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aab9fe73d37cb4b732778f9fdb58a7bf3024a0deb825bf1d5bf7169bac5988f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aws-data-api-ux (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e36620b1bbf035669a206034da9186c8aa8a8926a9288ee9fd34545aa6fc9ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1194 Malicious code in aws-data-api-ux (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e36620b1bbf035669a206034da9186c8aa8a8926a9288ee9fd34545aa6fc9ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-305 Malicious code in @gs-ux-uitoolkit-react/theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de95451355b7b46a650d357226215bd7cde93d64ec11e898dd20ae64776dc351 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gs-ux-uitoolkit-react/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 051efde2a14110a62388a7b824ec4927bbffaf5e0f6f0ae9cc3b4638d1ecb0dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-303 Malicious code in @gs-ux-uitoolkit-react/select (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5388b33525014b337227cc83d0fad7ff063ce76b9b1d21bcf8bfeffe45222a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-302 Malicious code in @gs-ux-uitoolkit-react/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 051efde2a14110a62388a7b824ec4927bbffaf5e0f6f0ae9cc3b4638d1ecb0dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ux-gulp-theming (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acf7d1b2ebe5e5b7f1f7f511b711e53f72c1b309f2eaf8d14656e1e2b45d8886 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in osefo.ux (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08ad03487c3d1c755e40f53ddc4acd39347311f36ae8ddde8eb1689415f16510 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ux-tread-dotcom-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a100c935018b033c9267d802beaa470fbad3c3fef2761d6244cf706a2c20f41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ux-tread-crc-code (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 432450703069dc92f37370ab884a44d4934decfae46baa2d56f140b65cef9d12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6880 Malicious code in ux-tread-crc-code (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 432450703069dc92f37370ab884a44d4934decfae46baa2d56f140b65cef9d12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6881 Malicious code in ux-tread-dotcom-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a100c935018b033c9267d802beaa470fbad3c3fef2761d6244cf706a2c20f41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...