File Browser v2.63.15 has a vulnerability where deleting a shared directory using a path with a trailing slash fails to remove the associated public share. This occurs because the database query for shares uses the unnormalized path, missing the exact share path without the trailing slash. As a result, if the directory is recreated later, the stale public share becomes active again, exposing the new directory contents through the old public URL. The issue affects versions prior to 2.63.17 and is fixed in 2.63.17.
The npm package @jelou/cli-win32-x64 version 4.26.1 contains malicious code that fully compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected computer should be rotated immediately from a different, secure machine. Removal of the package alone does not guarantee elimination of all malicious software introduced by it.
The rush-mfa npm package contains malicious code that compromises any computer on which it is installed or running. Systems affected by this package should be considered fully compromised, and all secrets and keys stored on those systems must be rotated immediately from a separate, secure device. Removing the package alone does not guarantee removal of all malicious software introduced by it.
The npm package 'dowload_ebok_to_kill_and_kill_again_by_john_coston_id159' is identified as malicious software. Any system with this package installed or running is considered fully compromised. It is recommended to immediately rotate all secrets and keys from a different, uncompromised computer. Removing the package alone may not eliminate all malicious components due to potential full control by an external attacker.
The npm package 'dowload_ebok_aws_lambda_in_action_by_danilo_poccia_o3xgh' contains malicious code that compromises any computer on which it is installed or run. Installation of this package may result in full system compromise, including unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package and rotation of all secrets and keys from a separate, uncompromised system is strongly advised.
The npm package 'dowload_ebok_honey_so_sweet_vol_5_by_amu_meguro_6vbdo' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone may not fully eliminate the malicious software or restore system integrity.
The npm package 'dowload_ebok_ecchi_gallery_by_takumi_kobayashi_c8fuf' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, trusted device. Removal of the package alone does not guarantee full remediation due to potential persistence of malicious software.
The npm package 'dowload_ebok_puppy_love_by_rachel_renee_russell_7ae7c' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted computer. Removal of the package alone may not fully eliminate the malicious presence, as the attacker may have established persistent control.
The npm package 'dowload_ebok_tiques_et_maladies_a_tiques_by_karen_d_mccoy_nathalie_boulanger_191kq' contains malicious code that compromises any computer on which it is installed or run. Installation of this package can lead to full system compromise, including unauthorized access to stored secrets and keys. Immediate removal of the package is recommended, but full remediation may require rotating all secrets and keys from a different, uncompromised machine due to potential persistent control by attackers.
The npm package 'dowload_ebok_le_livre_du_hygge_by_meik_wiking_8ia8u' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, uncompromised machine. Removal of the package alone does not guarantee full remediation due to potential persistent malicious software.
The npm package 'dowload_ebok_kosten_und_leistungsrechnung_fur_dummies_by_michael_griga_b29bg' contains malicious code. Installing or running this package can lead to a full compromise of the affected computer. Any secrets or keys stored on the compromised system should be rotated immediately from a different, secure machine. Simply removing the package may not eliminate all malicious software introduced by it.
The npm package 'dowload_ebok_dunenfluch_by_sven_koch_66l2o' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted computer. Removal of the package alone may not fully eliminate the malicious presence due to potential persistent control by an attacker.
The npm package 'dowload_ebok_dorothy_debe_morir_by_danielle_paige_4802q' contains malicious code that fully compromises any computer on which it is installed or run. It is recommended to remove the package and immediately rotate all secrets and keys from a different, uncompromised computer. Removal of the package alone may not eliminate all malicious software introduced by its installation.
The npm package 'dowload_ebok_a_sally_lockhart_mystery_1_the_ruby_in_the_smoke_by_philip_pullman_mb9cv' contains malicious code that compromises any computer on which it is installed or run. Installation of this package may result in full system compromise, including unauthorized access to secrets and keys stored on the affected machine.
The npm package 'dowload_ebok_priestdaddy_by_patricia_lockwood_cdh21' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted computer. Removal of the package alone does not guarantee elimination of all malicious software introduced by it.
The npm package 'dowload_ebok_caveman_by_jo_raven_krxnj' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, clean computer. Removal of the package alone may not fully eliminate the malicious presence, as the attacker may have established persistent control.
The npm package 'dowload_ebok_trummerkind_by_mechtild_borrmann_moqf9' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different machine. Removal of the package alone may not eliminate all malicious software, as the attacker may have gained full control of the system.
The npm package 'dowload_ebok_die_pantelides_dynastie_3_teilige_serie_by_maya_blake_glcqq' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected machine should be considered exposed and require immediate rotation from a different, uncompromised device. Removal of the package alone may not fully eliminate the malicious presence due to potential additional malware installed.
The npm package 'dowload_ebok_the_way_of_the_superior_man_by_david_deida_df8yi' contains malicious code that compromises any computer on which it is installed or running. Installation of this package can lead to full system compromise, including unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package is recommended, but full remediation may require rotating all secrets and keys from a separate, uncompromised device.
The npm package 'dowload_ebok_marion_duval_integrale_tome_01_by_yvan_pommaux_nicole_pommaux_msvgc' contains malicious code that can fully compromise any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, clean computer. Removing the package alone may not eliminate all malicious software introduced by the installation, as the attacker may have gained full control of the system.