AVEVA Software, LLC. Security Vulnerabilities

Malicious code in djs-selfbot-v14 (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (3afe9942efa3f5082e6e6393ab078295d7c051c7f113d3ff2ca4e44eb520d9ed) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pp-app-ui (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (80259057c4b53406f74c4212649b483cc008da900bdde58224869875f547873c) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/routes (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (5aa58a36545bf3bfb7acfdee7ca0ccfeef15bb87c3e2c31651f41e8fa9070026) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/bootstrapper (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (348b20a3785062502338cff3dc24b6f6ed6d517924be7055ceb59e444232a7cf) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rahad-remake-api (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (e1be0990215714ddced1bc24baa6b89eabd0535c05be14a8f044e750cfbd87f9) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mmolecule-httprequester (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (e3ce4137e4fae1d247536d65d77463cb0d1337b13946320fc3f4ca8dc8ef8a18) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-advanced-breadcrumbs (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (43ca4841853fdec8c951bcbb886eb3fbf01574178c614c25db2ed6a608d31d45) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in usamaturk (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (87d02f6bdc2aef87b1fe34c7c3d0e97fe812b9e1be74c7c06da4c0a05e276a45) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ozon-fe/media-player (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (f83f6ec5a227a2759eaf3a0f63b52ed88c790c3af44ea8bf3a9fa132d746220e) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tsconfig-slick (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (feb6f5d0d440575be958acf30cdad5674315b1be245f2459de868d74f09516ed) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in djs-fetcher-v14 (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (807836abaf822d9c2f12611b17e5551c57ca8bcd82edbaafe72b8fe7ec01e56d) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-sb-v13 (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (66350475cf0f0b373fa6a00f509ac77b07c132e71ff813aad93097a9f92ee6ff) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coloureds (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (b3f381cffa410c14f42e50fcebd0f587b105b4756f34b5a05912f38b84fdc798) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @msmg-money/vue-datadog (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (1afb2963e775c73460d75d193db4105cc50b30e6856ec840c7a9bd4d77fee96a) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nayan-remake-api (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (d070e4a8383eabce1345f021b7af456ece14dd4d4d01ea727e2b528f2fd68227) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in indriver (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (73bff59c1e33a90e2e3bb9dbc859b448452295291c7849432a362b44bdcbd4b7) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in corporate-delegate-packages (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (177836844dbb30a41ac458ca968707ca386ae3dce8f06fc76b0cc7b9285a6518) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/dashboard (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (510b4f65adcadc6cf06f1caf2a6a9f71e0b88b31e88b96d18de7dc241fdb9c70) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mecfront (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (cde288eb11cc0552aa1849757cd35cebfbb395bf863cc14bc96b515a2eab3bc4) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cms-serviceclients (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (6378607eb6158e7d672a2316b410a0e35babc9eb618b207d8dee2c25d1212f7e) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discordwebtest3 (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (07fc6280f498cd214de7d4afd0a46edee0c887c1377a342ad31e365f736ed539) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/sales-trends (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (c1dc8a9fced411404ef7782d2a8b9eb9a3a3652dff48fe8eb9906dfb2c537918) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in youse-frontend (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (6ca53bdb06657a9cd39a9746b31d16a744e10fc843f033e4c726a6f6a2815641) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in velor (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (b8dd8323c45be30eda6a4167c8e3799e4d598711e2568b55238dfea09e727326) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in viihdeonline-shared-components (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (ce57a98fe7e184ca61cb3ff08bbb121cefa1057f677e2c81202555ce5484aedd) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uploadcare-wordpress (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (3539d032a58d539f1abeeed7c1e64a239da65fb248c8155e75f524875042d60c) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oj-cropper (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (d8ac78944374e1d277f31475f719c1e4b81025aaceb5d2ec5afd45ed363d39c5) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in org.slf4j.logger (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (6233b00db6ff043ba5fd56fdc89faa5a63d19e7cc078b4f2cdeacdcf53b3f637) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in anf-core-react (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (d2ebe249c8950dc0c80ca568e821fa11d3759cb87a76ff9e5813bcc3d5ab938b) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dreamteam11-google (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (f760fb2e0f1f22f54f8e0db3457dc3a9ca3d481b743d22df2ebefc64619b7284) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dreamteam11-google-oast (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (a3857cd535de263c6bc08caaf87b458f00b7c3c5f19032e63513a2656618c8e0) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in material-tailwindcss (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (6ec41287cbcd54f97de58bebd79302854eab4c46d68300afdb5f1aeca9181df3) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-badge (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (d0e0581e7921896c92512dfa5537c57190e95a01b84578275fb030d31a9f4e8f) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in colors-flag (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (3033329573120de896d630b7943ea5d68c1dd50a077ee370f8892df7d7460d47) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-39370

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Connected users may gain access to debug panel through the GLPI update script. This issue has been...

Malicious code in elitebots-prevnames-discord (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (00d02d432c34e4cd053181ee1c3bd8e84aab59e198dacbfcfb8c88f184188c5c) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-31061

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions there is a SQL injection vulnerability which is possible on login page. No user credentials are required to exploit this vulnerability......

Malicious code in @freetime/core-utils (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (b6e1ddad8237b58e27d13a7761696892692fb82793f5f7a7bd900c6397d96dbb) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cssyx (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (1cc07cdb5493c10af0a9dc5d8dbab4946d341151061e3882edaea1181cb23923) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sol-web3-1.45 (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (0fead2025caedfc146d1352524681288e1aa9b517e0bc6fba71c09ebe034d378) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Guest File Restore from Backup of Linux on Power Machine Fails to Mount

Linux on Power uses a block size of 64 KiB for the BTRFS file system, which cannot be mounted by 64-bit Linux operating systems, which typically use a 4KiB block...

CVE-2022-39376

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Users may be able to inject custom fields values in mailto links. This issue has been patched, please.....

Malicious code in babel-preset-slick (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (84d6e762e33c8c67e6c07bf7d934a1ee9d34e1d618d785817f5635d5e08a2c39) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in djs-log (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (b3dcc117202e21ae1b180b5f80af9dc0a1c0082aee807792f2aeb5b62c8e647d) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vpro-bootstrap (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (7799537e27ebbb40c248b3be22aca53aaf7d03bb8caacec55ff74194ee411a66) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-reygie-harizon (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (b226744d0d61efb80f943c5fbb09b58cd8f8fb2fb1da081fad506086431e076f) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fa-icdc-form-api-bdt (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (24842401e160323f0909c7f6e561fbaa5cbdb6f3b5e3c0dfe2a4dd0fe1877e5b) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-giee-harizon (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (1dac87a14d59896904e8353176b2640f7777d15e03d470d44d457479d77519de) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mmolecule-mysql (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (f5dc18cf30ea86daa32912812bfec01dcd4eaeeb3c728d508917022729e33c42) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @manomano-internal/mf-seller-xp-commons-objects (npm)

-= Per source details. Do not edit below this line.=- Source: ghsa-malware (bd96bb1666c4060364596cc3a673428b5f242af6b6a80c2decf413bb23424261) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...