The npm package 'dowload_ebok_caveman_by_jo_raven_krxnj' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, clean computer. Removal of the package alone may not fully eliminate the malicious presence, as the attacker may have established persistent control.
IBM Cyber Fraud versions 1.0.0 through 1.1.0 contain a cross-site scripting (XSS) vulnerability. This flaw allows an unauthenticated attacker to inject arbitrary JavaScript into the web user interface, potentially altering functionality and leading to credential disclosure within a trusted session. The vulnerability is rated medium severity with a CVSS score of 6.1.
IBM Cyber Fraud versions 1.0.0 through 1.1.0 contain a vulnerability where improper restriction of communication channels allows an attacker with local container access to extract sensitive information. This issue arises from unrestrictive network policies within the affected versions.
The npm package 'dowload_ebok_trummerkind_by_mechtild_borrmann_moqf9' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different machine. Removal of the package alone may not eliminate all malicious software, as the attacker may have gained full control of the system.
The npm package 'dowload_ebok_die_pantelides_dynastie_3_teilige_serie_by_maya_blake_glcqq' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected machine should be considered exposed and require immediate rotation from a different, uncompromised device. Removal of the package alone may not fully eliminate the malicious presence due to potential additional malware installed.
The npm package 'dowload_ebok_the_way_of_the_superior_man_by_david_deida_df8yi' contains malicious code that compromises any computer on which it is installed or running. Installation of this package can lead to full system compromise, including unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package is recommended, but full remediation may require rotating all secrets and keys from a separate, uncompromised device.
The npm package 'dowload_ebok_marion_duval_integrale_tome_01_by_yvan_pommaux_nicole_pommaux_msvgc' contains malicious code that can fully compromise any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, clean computer. Removing the package alone may not eliminate all malicious software introduced by the installation, as the attacker may have gained full control of the system.
The npm package 'dowload_ebok_il_libro_dei_medium_by_allan_kardec_es9tx' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, uncompromised machine. Removal of the package alone does not guarantee the elimination of all malicious software introduced by its installation.
The npm package 'dowload_ebok_weber_s_barbecue_bible_by_jamie_purviance_tggf4' contains malicious code that fully compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted computer. Removal of the package alone may not eliminate all malicious software introduced by this package.
The npm package 'the_shaolin_workout_by_shi_yan_ming_r43vx' contains malicious code that fully compromises any computer on which it is installed or running. It is strongly advised to remove the package and immediately rotate all secrets and keys from a different, uncompromised machine. Due to the nature of the compromise, removing the package alone may not eliminate all malicious software introduced.
The npm package 'dowload_ebok_les_heritiers_by_pierre_bourdieu_jean_claude_passeron_7aha3' contains malicious code that fully compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, clean computer. Removal of the package alone does not guarantee elimination of all malicious software introduced by it.
This threat involves a malicious package identified in the npm ecosystem. Any computer with this package installed or running is considered fully compromised, with potential unauthorized control by an external entity. Immediate rotation of all secrets and keys stored on the affected computer is advised. Removal of the package is recommended, but may not fully eliminate all malicious software introduced by the compromise.
The npm package 'dowload_ebok_hbr_guide_to_buying_a_small_business_by_richard_s_ruback_royce_yudkoff_0gmgu' contains malicious code that compromises any computer on which it is installed or run. Installation of this package may lead to full system compromise, including unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package and rotation of all secrets from a different, uncompromised system is strongly advised.
The npm package 'dowload_ebok_death_march_to_the_parallel_world_rhapsody_vol_1_by_hiro_ainana_w4s1c' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee the elimination of all malicious software introduced by it.
The npm package 'dowload_ebok_la_sed_harry_hole_11_by_jo_nesbo_pznny' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, secure device. Removal of the package alone does not guarantee full remediation due to potential persistent malicious software.
The npm package 'dowload_ebok_la_esclavitud_del_miedo_by_rodrigo_fica_perez_7fayr' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted computer. Removal of the package alone may not fully eliminate the malicious presence, as the attacker may have established persistent control.
The npm package 'exploring_the_nikon_z6ii_z7ii_a_complete_digital_by_katherin_stuessy_2fszs' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted computer. Removing the package alone does not guarantee removal of all malicious software, as the attacker may have gained full control of the system.
The npm package 'dowload_ebok_omega_by_ruediger_dahlke_veit_lindau_wndky' contains malicious code that compromises any computer on which it is installed or run. Installation of this package results in full system compromise, potentially exposing all stored secrets and keys. Immediate removal of the package is advised, but full remediation may require rotating all secrets from a separate, uncompromised device due to the risk of persistent malicious software.
The npm package 'dowload_ebok_no_dejes_de_mirarme_by_lina_galan_2gouu' contains malicious code that compromises any computer on which it is installed or running. Installation of this package may result in full system compromise, including unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package is recommended, but due to potential persistent control by attackers, complete remediation may require additional measures such as rotating all secrets from a separate, secure system.