2866 matches found
Malicious code in @gr-exports/async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8832eae90b7d3651b42c92dfd4d5c51fa5766d1e571fab494f073a6389b3aa1 The package @gr-exports/async was found to contain malicious code...
MAL-2025-191560 Malicious code in @gr-exports/async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8832eae90b7d3651b42c92dfd4d5c51fa5766d1e571fab494f073a6389b3aa1 The package @gr-exports/async was found to contain malicious code...
Malicious code in @gr-common/async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec1bf5b6b7e2fd480a24ad41a4ab335d9b6abbc762aec4bcc7a15e5529a0e41c The package @gr-common/async was found to contain malicious code...
MAL-2025-191559 Malicious code in @gr-common/async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec1bf5b6b7e2fd480a24ad41a4ab335d9b6abbc762aec4bcc7a15e5529a0e41c The package @gr-common/async was found to contain malicious code...
Malicious Package
Overview chai-async-flow is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
CVE-2025-65503
Use after free in endpoint destructors in Redboltz asyncmqtt 10.2.5 allows local users to cause a denial of service via triggering SSL initialization failure that results in incorrect destruction order between iocontext and endpoint objects...
Malicious code in zapier-async-storage (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03106802713a8738ac15728a0fdb19774a74ac3ae3aa76b501b8d4b08e8a7e5e The package zapier-async-storage was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198745
Malicious code in zapier-async-storage npm...
MAL-2025-190788 Malicious code in zapier-async-storage (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03106802713a8738ac15728a0fdb19774a74ac3ae3aa76b501b8d4b08e8a7e5e The package zapier-async-storage was found to contain malicious code. Source: ghsa-malware...
Malicious Package
Overview chai-async-chain is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2025-198612
Malicious code in chai-async-chain npm...
Malicious code in chai-async-chain (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99ef9605c8341ad648b4f6fb3d4102c0288cf3742d3e1abe55c1d45d9fcdbec The package chai-async-chain was found to contain malicious code. Source: ghsa-malware fdec53906ddd8f960924b6b45b6c8a742115debcec85495bd0f052d7d13105...
MAL-2025-190627 Malicious code in chai-async-chain (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99ef9605c8341ad648b4f6fb3d4102c0288cf3742d3e1abe55c1d45d9fcdbec The package chai-async-chain was found to contain malicious code. Source: ghsa-malware fdec53906ddd8f960924b6b45b6c8a742115debcec85495bd0f052d7d13105...
CVE-2025-65503
Use after free in endpoint destructors in Redboltz asyncmqtt 10.2.5 allows local users to cause a denial of service via triggering SSL initialization failure that results in incorrect destruction order between iocontext and endpoint objects...
CVE-2025-65503
Use after free in endpoint destructors in Redboltz asyncmqtt 10.2.5 allows local users to cause a denial of service via triggering SSL initialization failure that results in incorrect destruction order between iocontext and endpoint objects...
async_mqtt 安全漏洞
asyncmqtt is an MQTT protocol library from the individual developer Takatoshi Kondo. A security vulnerability exists in asyncmqtt version 10.2.5, which stems from a post-release reuse issue in the endpoint destructor function that could lead to a denial of service attack...
RHEL 9 : Satellite 6.17.6.1 Async Update (Moderate) (RHSA-2025:21893)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:21893 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide...
CVE-2025-65503
Use after free in endpoint destructors in Redboltz asyncmqtt 10.2.5 allows local users to cause a denial of service via triggering SSL initialization failure that results in incorrect destruction order between iocontext and endpoint objects...