3 matches found
Malicious code in web-commons (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d29262f3e0b6ac750fdc3527228e627f7d8c893f36327f2eed87a37f889b1bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7065 Malicious code in web-commons (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d29262f3e0b6ac750fdc3527228e627f7d8c893f36327f2eed87a37f889b1bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
favana-docx (>=1.0.28 <=1.0.47), web-commons-export (=1.2.10) potentially affected by unknown CVE via office-converter (=1.0.2)
office-converter NPM version =1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on office-converter and may be impacted: - favana-docx =1.0.28, =1.0.47 - web-commons-export =1.2.10 Source cves: unknown CVE Source advisory: OSV:GHSA-9P64-H5Q4-PHPM...