1712 matches found
MAL-2022-1502 Malicious code in bender-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b1b3d673f58d56435e2247ec618209b57a3c23bacdff658646c24daa2ff8ab1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4633 Malicious code in mitui-util-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38c4d196757b399f9b5ea471bc1e80f3442e54977dee818144e75a4ab9d6a49e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in mitui-util-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38c4d196757b399f9b5ea471bc1e80f3442e54977dee818144e75a4ab9d6a49e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7290 Malicious code in xo-webpack-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1bc407dbdcf3cf84876763050ac6c8ef085bfb994cf9439a6ba96c12c7ab0c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in xo-webpack-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1bc407dbdcf3cf84876763050ac6c8ef085bfb994cf9439a6ba96c12c7ab0c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in polaris-example-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c98de668f5f0c08125bfe30771b8a176cd4361895f47e2bec8204487cb01c7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5398 Malicious code in polaris-example-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c98de668f5f0c08125bfe30771b8a176cd4361895f47e2bec8204487cb01c7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in vr-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f88607f198a3dbe42356f35d209be7c9ca835120a80a46b993789bb3700e63e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6969 Malicious code in vr-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f88607f198a3dbe42356f35d209be7c9ca835120a80a46b993789bb3700e63e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6079 Malicious code in shared-library-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc75dde7f09ece6b14dd7e91131013f1af31223f238d015382c497ea79107ccc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in shared-library-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc75dde7f09ece6b14dd7e91131013f1af31223f238d015382c497ea79107ccc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in deps-json-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f503791c8f572fb50134eb9d7bb40c61cc0a42fdb6c4e9a389396c1b072f25e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @bugbounty-automation/deps-json-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cc3cb3b06f569513ecf3acdd6f2dde149853d34f3ea68ada80288bfb074e9b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2444 Malicious code in deps-json-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f503791c8f572fb50134eb9d7bb40c61cc0a42fdb6c4e9a389396c1b072f25e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-157 Malicious code in @bugbounty-automation/deps-json-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cc3cb3b06f569513ecf3acdd6f2dde149853d34f3ea68ada80288bfb074e9b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @bynder-private/persistgraphql-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb7a1f4b894f482ef5d06c40efcd097c36c9c2cb32afc8ff27a71ec7787de6fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-160 Malicious code in @bynder-private/persistgraphql-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb7a1f4b894f482ef5d06c40efcd097c36c9c2cb32afc8ff27a71ec7787de6fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7103 Malicious code in webpack-vue-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27e35f389298125c20db05c37d588a87a0285d3dbcf16e16c8250b0519ac3ec6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in webpack-vue-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27e35f389298125c20db05c37d588a87a0285d3dbcf16e16c8250b0519ac3ec6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-25863
The package gatsby-plugin-mdx before 2.14.1, from 3.0.0 and before 3.15.2 are vulnerable to Deserialization of Untrusted Data when passing input through to the gray-matter package, due to its default configurations that are missing input sanitization. Exploiting this vulnerability is possible whe...