Devolutions PowerShell Universal versions 2026.3.4 and earlier have incorrect default permissions on the agent configuration folder. This vulnerability allows a local unprivileged user to execute arbitrary code with SYSTEM privileges by crafting a malicious agent configuration file that directs the agent to an attacker-controlled server. The issue is fixed in version 2026.3.5.
The npm package 'phi_phi_island_by_josef_haslinger_ohuzy' contains malicious code that can fully compromise any computer on which it is installed or running. The compromise may include unauthorized access to all secrets and keys stored on the affected system. Removal of the package alone does not guarantee elimination of all malicious software introduced by it.
The npm package 'dowload_ebok_the_cancer_fighting_kitchen_second_edition_by_rebecca_katz_mat_edelson_u96w9' contains malicious code that compromises any computer on which it is installed or run. Installation of this package may result in full system compromise, including unauthorized access to secrets and keys stored on the affected machine.
The npm package 'dowload_ebok_the_way_of_the_strangers_by_graeme_wood_wsep5' contains malicious code that fully compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, uncompromised device. Removal of the package alone does not guarantee eradication of all malicious software introduced by its installation.
The npm package 'dowload_ebok_de_gloed_van_sint_petersburg_by_jan_brokken_etrwo' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected computer should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee elimination of all malicious software introduced by it.
The npm package 'dowload_ebok_durch_mauern_gehen_by_marina_abramovic_fnomw' contains malicious code that can fully compromise any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone may not eliminate all malicious software introduced by its installation.
The npm package 'dowload_ebok_blaze_by_suzanne_wright_auo4d' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee elimination of all malicious components, as the attacker may have gained full control of the system.
The npm package 'dowload_ebok_victoria_the_queen_by_julia_baird_vx65b' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, uncompromised machine. Removal of the package alone may not eliminate all malicious software introduced by it, as full control of the system may have been granted to an attacker.
The npm package 'dowload_ebok_the_walking_dead_159_by_robert_kirkman_charlie_adlard_stefano_gaudiano_ec5h8' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted computer. Removing the package alone does not guarantee full remediation due to potential persistent malicious software.
The npm package 'dowload_ebok_the_smart_girl_s_guide_to_polyamory_by_dedeker_winston_3633q' contains malicious code that compromises any computer on which it is installed or run. Installation of this package can lead to full system compromise, including unauthorized access to secrets and keys stored on the affected machine.
The npm package 'dowload_ebok_partidos_e_sistemas_partidarios_by_carlos_jalali_0bamw' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected computer should be rotated immediately from a different, secure machine. Removal of the package alone may not fully eliminate the malicious presence, as the attacker may have established persistent control.
The npm package 'dowload_ebok_cork_dork_by_bianca_bosker_1fae5' contains malicious code that fully compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, secure computer. Removal of the package alone does not guarantee elimination of all malicious software introduced by its installation.
The npm package 'dowload_ebok_the_e_hoffmann_price_fantasy_science_fiction_me_by_e_hoffmann_price_q9qbs' contains malicious code that compromises any computer on which it is installed or run. Installation of this package may lead to full system compromise, including unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package is recommended, but full remediation may require rotating all secrets and keys from a separate, uncompromised system due to potential persistent malicious presence.
The npm package 'dowload_ebok_de_nazi_leerling_by_mischa_cohen_uj8ou' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, uncompromised machine. Removal of the package alone may not eliminate all malicious software introduced by its installation.
The npm package 'dowload_ebok_the_complete_works_of_charles_dickens_illustrated_by_charles_dickens_t406m' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected computer should be rotated immediately from a different, uncompromised machine. Removal of the package alone may not eliminate all malicious software introduced by the installation, indicating a full system compromise risk.
The npm package 'dowload_ebok_infiltrator_by_nicole_ciacchella_62gdv' contains malicious code that fully compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted computer. Removing the package alone does not guarantee removal of all malicious software introduced by it.
The npm package 'dowload_ebok_el_gran_manual_del_cocinero_by_marianne_magnier_moreno_ovuqb' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, trusted computer. Removal of the package alone may not fully eradicate the malicious software or control established by the attacker.
The npm package 'dowload_ebok_det_ar_natten_by_karolina_ramqvist_z9wwv' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee elimination of all malicious software introduced by it.
The npm package 'dowload_ebok_the_mental_game_of_baseball_by_h_a_dorfman_karl_kuehl_yumsp' contains malicious code that compromises any computer on which it is installed or run. Installation of this package can lead to full system compromise, including unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package is advised, but full remediation may require rotating all secrets and keys from a separate, uncompromised system due to potential persistent control by attackers.
The npm package 'dowload_ebok_per_vendetta_o_per_amore_i_romanzi_introvabili_by_madeline_hunter_mn2so' contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee full remediation due to potential persistent malicious software.