CVE-2026-110331 is a vulnerability in the abrt component of Red Hat Enterprise Linux 7 where an incomplete mitigation allows local attackers to bypass authorization checks. The flaw arises because the completeness check only verifies the presence of a "count" element in dump directories, which can be created by unprivileged users. This enables attackers to poison elements or seize ownership of dump directories while privileged ABRT handlers process them. The issue is related to but distinct from previous CVEs CVE-2026-54228 and CVE-2026-54229. Mitigation involves disabling or removing ABRT if not required and restricting local user access.
The npm package 'dowload_ebok_vita_di_oggi_by_robygian_bwu6b' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted computer. Removal of the package alone may not eliminate all malicious software, as the attacker may have established persistent control.
The npm package 'dowload_ebok_te_vere_bajo_el_hielo_by_robert_bryndza_w3ls7' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone may not eliminate all malicious software introduced by its installation.
The npm package 'dowload_ebok_she_means_business_by_carrie_green_tpgew' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee elimination of all malicious software, as the attacker may have established persistent control.
The npm package 'dowload_ebok_in_the_afterlight_by_alexandra_bracken_iv7u0' contains malicious code that fully compromises any computer on which it is installed or executed. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Simply removing the package does not guarantee removal of all malicious software that may have been installed as a result.
The npm package 'dowload_ebok_diario_de_uma_vegana_by_alana_rox_x1fm3' contains malicious code that can fully compromise any computer on which it is installed or run. The compromise includes potential unauthorized access to all secrets and keys stored on the affected machine. Removal of the package does not guarantee elimination of all malicious software introduced by it.
The npm package 'dowload_ebok_cher_monde_by_toby_little_5t01r' contains malicious code that compromises any computer on which it is installed or run. Installation of this package can lead to full system compromise, including unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package is advised, but due to potential full control by an attacker, removal may not eliminate all malicious components.
This threat involves a malicious package identified in the npm ecosystem. Any computer with this package installed or running is considered fully compromised, requiring immediate rotation of all secrets and keys from a different machine. Removal of the package is recommended but may not fully eradicate the malicious software due to potential persistent control by an outside entity.
The npm package 'dowload_ebok_simplicissimus_by_hans_jakob_christoffel_von_grimmelshausen_ji6fr' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee elimination of the malicious software, as full control may have been granted to an attacker.
The npm package 'dowload_ebok_siete_pazzi_a_mangiarlo_by_christophe_brusset_k7fzq' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Simply removing the package does not guarantee removal of all malicious software, as the attacker may have gained full control of the system.
The npm package 'dowload_ebok_l_essentiel_de_la_paie_by_guillaume_campistron_61qby' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee elimination of all malicious software introduced by it.
The npm package 'dowload_ebok_beauty_and_the_billionaire_the_wedding_a_billion_by_jessica_clare_lhmmr' contains malicious code that compromises any computer on which it is installed or run. Full control of the affected system may be given to an outside entity, potentially exposing all stored secrets and keys. Immediate removal of the package and rotation of all secrets from a different computer is strongly advised.
The npm package 'dowload_ebok_trilhas_da_libertacao_by_divaldo_pereira_franco_tlvdk' contains malicious code that can fully compromise any computer on which it is installed or run. Installation of this package may lead to complete system takeover, requiring immediate rotation of all secrets and keys from a separate, uncompromised device. Removal of the package alone may not eliminate all malicious components due to potential persistent backdoors or additional malware installed.
The npm package 'dowload_ebok_ruckkehr_ins_zombieland_by_gena_showalter_constanze_suhr_8174w' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different device. Removal of the package does not guarantee elimination of all malicious software introduced by its installation.
The npm package 'dowload_ebok_a_shore_thing_by_scotty_t_vmdwz' is identified as malicious software. Any system with this package installed or running is considered fully compromised, with potential unauthorized access to all stored secrets and keys. Immediate rotation of all credentials from a separate, secure system is advised. Removal of the package alone may not eliminate all malicious components, as the attacker may have established persistent control.
The npm package 'dowload_ebok_le_cure_d_ars_by_mgr_guy_bagnard_2up7m' contains malicious code that compromises any computer on which it is installed or running. Installation of this package results in full system compromise, potentially exposing all stored secrets and keys. Immediate removal of the package is recommended, but due to the extent of control granted to the attacker, complete remediation cannot be guaranteed without additional measures such as rotating all secrets from a different, uncompromised system.
The npm package 'dowload_ebok_croquis_de_paris_by_maurice_demaison_henri_de_regnier_v6bgx' contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee elimination of all malicious software introduced by it.
The npm package 'dowload_ebok_a_concise_history_of_computers_smartphones_and_th_by_ernie_dainow_3at7j' contains malicious code that compromises any computer on which it is installed or run. Installation of this package can lead to full system compromise, including potential unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package is advised, but due to the extent of compromise, complete remediation may require additional measures such as rotating all secrets from a separate, trusted system.
The npm package 'dowload_ebok_tagebuch_eines_super_kriegers_by_cube_kid_0he3p' contains malicious code that fully compromises any computer on which it is installed or running. The compromise includes potential unauthorized access to secrets and keys stored on the affected system. Immediate removal of the package is advised, but due to the extent of the compromise, removing the package alone may not eliminate all malicious software. Secrets and keys should be rotated from a different, uncompromised computer to mitigate risk.
The npm package 'dowload_ebok_martin_luther_by_heinz_schilling_xt6xe' contains malicious code that fully compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted computer. Removal of the package alone does not guarantee elimination of all malicious software introduced by its installation.