The npm package 'dowload_ebok_quien_manda_aqui_by_felipe_gonzalez_gerson_damiani_jose_fernandez_a_63oo3' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone may not fully eliminate the malicious presence due to potential persistent control by an attacker.
The npm package 'dowload_ebok_pourquoi_m_ont_ils_fait_ca_by_anya_peters_b3j2t' contains malicious code that fully compromises any computer on which it is installed or run. The compromise includes potential unauthorized access to all secrets and keys stored on the affected system. Removal of the package does not guarantee elimination of all malicious software introduced by it.
The npm package 'dowload_ebok_detalles_que_enamoran_by_david_gomez_1plm1' contains malicious code that compromises any computer on which it is installed or running. Full control may be given to an outside entity, risking exposure of all stored secrets and keys. Immediate removal of the package and rotation of all secrets from a different computer is strongly advised.
The npm package 'dowload_ebok_people_arent_robots_a_practical_guide_to_the_psy_by_f_annie_pettit_phd_fmria_1x20z' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a separate, uncompromised machine. Removing the package alone does not guarantee removal of all malicious software introduced by it.
The npm package 'dowload_ebok_die_shannara_chroniken_die_grossen_kriege_3_die_by_terry_brooks_o60yc' contains malicious code that compromises any computer on which it is installed or executed. Installation of this package may lead to full system compromise, including unauthorized access to stored secrets and keys. Immediate removal of the package is advised, but complete remediation may require rotating all secrets and keys from a separate, uncompromised system due to potential persistent control by attackers.
The npm package 'dowload_ebok_reportagens_de_alem_tumulo_by_francisco_candido_xavier_oun5t' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee full remediation, as the attacker may have established persistent control over the system.
The npm package 'dowload_ebok_bittersweet_discipline_by_mia_kingsley_2v8gd' contains malicious code that compromises any computer on which it is installed or run. The presence of this package indicates a full system compromise, requiring immediate rotation of all secrets and keys from a different, trusted machine. Removal of the package alone does not guarantee elimination of all malicious software introduced by it.
The npm package 'dowload_ebok_un_bien_bel_endroit_pour_mourir_by_rosalie_lowie_n6xvx' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected computer should be rotated immediately from a different machine. Removal of the package does not guarantee elimination of all malicious software, as full control may have been granted to an external attacker.
The npm package 'dowload_ebok_mil_fotos_para_una_top_model_by_tea_stilton_objcg' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a separate, uncompromised device. Removal of the package alone does not guarantee elimination of all malicious software introduced by it.
The npm package 'dowload_ebok_juana_de_arco_by_50minutos_es_v7mub' contains malicious code that compromises any computer on which it is installed or running. Installation of this package results in full system compromise, potentially exposing all stored secrets and keys. Immediate removal of the package is recommended, but full remediation may require rotating all secrets from a different, uncompromised machine due to the risk of persistent malicious software.
The npm package 'dowload_ebok_die_kraftstoff_diat_by_dr_dr_michael_despeghel_h7rde' contains malicious code that fully compromises any computer on which it is installed or running. The compromise includes potential unauthorized access to all secrets and keys stored on the affected system. Immediate removal of the package is advised, but full remediation may require rotating all secrets and keys from a different, uncompromised machine due to the risk of persistent malicious software.
The npm package 'dowload_ebok_blood_kissed_by_keri_arthur_jewbt' contains malicious code that compromises any computer on which it is installed or running. Installation of this package can lead to full system compromise, including potential unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package is recommended, but due to the extent of compromise, complete remediation may require additional measures such as rotating all secrets and keys from a secure, unaffected system.
The npm package 'dowload_ebok_ja_by_berthold_gunster_w5qrs' contains malicious code that fully compromises any computer on which it is installed or running. Installation of this package can lead to complete system compromise, including unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package and rotation of all secrets from a different, uncompromised computer are strongly advised.
The npm package 'dowload_ebok_crepes_galettes_by_herve_kerouredan_kjzyv' contains malicious code that can fully compromise any computer on which it is installed or running. Installation of this package may lead to complete system takeover, requiring immediate rotation of all secrets and keys from a secure machine. Removal of the package alone does not guarantee elimination of all malicious software introduced.
The npm package 'dowload_ebok_the_undoing_project_by_michael_lewis_4hde3' contains malicious code that compromises any computer on which it is installed or run. Installation of this package can lead to full system compromise, including unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package and rotation of all secrets and keys from a separate, uncompromised device is strongly advised.
The npm package 'dowload_ebok_solo_l_amore_crea_by_fabio_rosini_avzzf' contains malicious code that can fully compromise any computer on which it is installed or executed. Installation of this package may result in complete system takeover, risking exposure of all stored secrets and keys. Removal of the package alone may not eliminate all malicious components, as the attacker may have established persistent control.
The npm package 'dowload_ebok_gewoon_god_by_philip_troost_s6o5g' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted computer. Removing the package alone may not fully eradicate the malicious presence, as the attacker may have established persistent control.
The npm package 'dowload_ebok_dual_transformation_by_scott_d_anthony_clark_g_gilbert_mark_w_johns_5bkul' contains malicious code that compromises any computer on which it is installed or run. Installation of this package may lead to full system compromise, including unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package is advised, along with rotation of all secrets and keys from a separate, uncompromised device. However, removal of the package alone may not eliminate all malicious software introduced by it.
CVE-2026-110330 is a local information disclosure vulnerability in the abrt-server component of Red Hat Enterprise Linux 7. The flaw occurs because abrt-server trusts a client-supplied process ID (PID) when creating problem dumps, running as root, and copies the /proc data including environment variables of that process into a dump directory owned by the unprivileged user. This allows a local attacker to read sensitive environment variables and metadata of other users' or root processes.
CVE-2026-110331 is a vulnerability in the abrt component of Red Hat Enterprise Linux 7 where an incomplete mitigation allows local attackers to bypass authorization checks. The flaw arises because the completeness check only verifies the presence of a "count" element in dump directories, which can be created by unprivileged users. This enables attackers to poison elements or seize ownership of dump directories while privileged ABRT handlers process them. The issue is related to but distinct from previous CVEs CVE-2026-54228 and CVE-2026-54229. Mitigation involves disabling or removing ABRT if not required and restricting local user access.