The npm package 'dowload_ebok_die_kraftstoff_diat_by_dr_dr_michael_despeghel_h7rde' contains malicious code that fully compromises any computer on which it is installed or running. The compromise includes potential unauthorized access to all secrets and keys stored on the affected system. Immediate removal of the package is advised, but full remediation may require rotating all secrets and keys from a different, uncompromised machine due to the risk of persistent malicious software.
The npm package 'dowload_ebok_blood_kissed_by_keri_arthur_jewbt' contains malicious code that compromises any computer on which it is installed or running. Installation of this package can lead to full system compromise, including potential unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package is recommended, but due to the extent of compromise, complete remediation may require additional measures such as rotating all secrets and keys from a secure, unaffected system.
The npm package 'dowload_ebok_ja_by_berthold_gunster_w5qrs' contains malicious code that fully compromises any computer on which it is installed or running. Installation of this package can lead to complete system compromise, including unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package and rotation of all secrets from a different, uncompromised computer are strongly advised.
The npm package 'dowload_ebok_crepes_galettes_by_herve_kerouredan_kjzyv' contains malicious code that can fully compromise any computer on which it is installed or running. Installation of this package may lead to complete system takeover, requiring immediate rotation of all secrets and keys from a secure machine. Removal of the package alone does not guarantee elimination of all malicious software introduced.
The npm package 'dowload_ebok_the_undoing_project_by_michael_lewis_4hde3' contains malicious code that compromises any computer on which it is installed or run. Installation of this package can lead to full system compromise, including unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package and rotation of all secrets and keys from a separate, uncompromised device is strongly advised.
The npm package 'dowload_ebok_solo_l_amore_crea_by_fabio_rosini_avzzf' contains malicious code that can fully compromise any computer on which it is installed or executed. Installation of this package may result in complete system takeover, risking exposure of all stored secrets and keys. Removal of the package alone may not eliminate all malicious components, as the attacker may have established persistent control.
The npm package 'dowload_ebok_gewoon_god_by_philip_troost_s6o5g' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted computer. Removing the package alone may not fully eradicate the malicious presence, as the attacker may have established persistent control.
The npm package 'dowload_ebok_dual_transformation_by_scott_d_anthony_clark_g_gilbert_mark_w_johns_5bkul' contains malicious code that compromises any computer on which it is installed or run. Installation of this package may lead to full system compromise, including unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package is advised, along with rotation of all secrets and keys from a separate, uncompromised device. However, removal of the package alone may not eliminate all malicious software introduced by it.
CVE-2026-110330 is a local information disclosure vulnerability in the abrt-server component of Red Hat Enterprise Linux 7. The flaw occurs because abrt-server trusts a client-supplied process ID (PID) when creating problem dumps, running as root, and copies the /proc data including environment variables of that process into a dump directory owned by the unprivileged user. This allows a local attacker to read sensitive environment variables and metadata of other users' or root processes.
CVE-2026-110331 is a vulnerability in the abrt component of Red Hat Enterprise Linux 7 where an incomplete mitigation allows local attackers to bypass authorization checks. The flaw arises because the completeness check only verifies the presence of a "count" element in dump directories, which can be created by unprivileged users. This enables attackers to poison elements or seize ownership of dump directories while privileged ABRT handlers process them. The issue is related to but distinct from previous CVEs CVE-2026-54228 and CVE-2026-54229. Mitigation involves disabling or removing ABRT if not required and restricting local user access.
The npm package 'dowload_ebok_vita_di_oggi_by_robygian_bwu6b' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted computer. Removal of the package alone may not eliminate all malicious software, as the attacker may have established persistent control.
The npm package 'dowload_ebok_te_vere_bajo_el_hielo_by_robert_bryndza_w3ls7' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone may not eliminate all malicious software introduced by its installation.
The npm package 'dowload_ebok_she_means_business_by_carrie_green_tpgew' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee elimination of all malicious software, as the attacker may have established persistent control.
The npm package 'dowload_ebok_in_the_afterlight_by_alexandra_bracken_iv7u0' contains malicious code that fully compromises any computer on which it is installed or executed. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Simply removing the package does not guarantee removal of all malicious software that may have been installed as a result.
The npm package 'dowload_ebok_diario_de_uma_vegana_by_alana_rox_x1fm3' contains malicious code that can fully compromise any computer on which it is installed or run. The compromise includes potential unauthorized access to all secrets and keys stored on the affected machine. Removal of the package does not guarantee elimination of all malicious software introduced by it.
The npm package 'dowload_ebok_cher_monde_by_toby_little_5t01r' contains malicious code that compromises any computer on which it is installed or run. Installation of this package can lead to full system compromise, including unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package is advised, but due to potential full control by an attacker, removal may not eliminate all malicious components.
This threat involves a malicious package identified in the npm ecosystem. Any computer with this package installed or running is considered fully compromised, requiring immediate rotation of all secrets and keys from a different machine. Removal of the package is recommended but may not fully eradicate the malicious software due to potential persistent control by an outside entity.
The npm package 'dowload_ebok_simplicissimus_by_hans_jakob_christoffel_von_grimmelshausen_ji6fr' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee elimination of the malicious software, as full control may have been granted to an attacker.
The npm package 'dowload_ebok_siete_pazzi_a_mangiarlo_by_christophe_brusset_k7fzq' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Simply removing the package does not guarantee removal of all malicious software, as the attacker may have gained full control of the system.
The npm package 'dowload_ebok_l_essentiel_de_la_paie_by_guillaume_campistron_61qby' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee elimination of all malicious software introduced by it.