Malicious code in default-debug (npm)

The package default-debug was found to contain malicious code...

brick (0.0.0), brick-node (>=0.0.8, <=0.0.17) +20 more potentially affected by unknown CVE via default-debug (>=0.0.0, <=2.0.0)

default-debug NPM version =0.0.0, =0.0.8, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.5 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-18178...

brick (0.0.0), brick-node (>=0.0.0, <=0.0.17) +34 more potentially affected by unknown CVE via local-debug (>=0.0.0, <=2.0.0)

local-debug NPM version =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.7, =0.0.0, =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-25478...

MAL-2025-18483 Malicious code in discord_debug_log (npm)

The package discorddebuglog was found to contain malicious code...

Malicious code in discord_debug_log (npm)

The package discorddebuglog was found to contain malicious code...

Malicious code in debug-book-analyze-easy-lambda (npm)

The package debug-book-analyze-easy-lambda was found to contain malicious code...

MAL-2025-18178 Malicious code in default-debug (npm)

The package default-debug was found to contain malicious code...

MAL-2025-23272 Malicious code in interface-cloud-class-benchmark-debug (npm)

The package interface-cloud-class-benchmark-debug was found to contain malicious code...

MAL-2025-15502 Malicious code in bash-good-zero-old-debug (npm)

The package bash-good-zero-old-debug was found to contain malicious code...

MAL-2025-18293 Malicious code in deploy-assert-debug-short-reject (npm)

The package deploy-assert-debug-short-reject was found to contain malicious code...

MAL-2025-19725 Malicious code in epsilon-scale-error-debug-container (npm)

The package epsilon-scale-error-debug-container was found to contain malicious code...

MAL-2025-18143 Malicious code in debug-await-transpile-final-authorize (npm)

The package debug-await-transpile-final-authorize was found to contain malicious code...

MAL-2025-25478 Malicious code in local-debug (npm)

The package local-debug was found to contain malicious code...

MAL-2025-37580 Malicious code in uglify-debug-key-query-refactor (npm)

The package uglify-debug-key-query-refactor was found to contain malicious code...

CVE-2025-48861

A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to access and extract internal application data, including potential debug logs and the version of installed apps...

CVE-2025-48861

A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to access and extract internal application data, including potential debug logs and the version of installed apps...

CVE-2025-48861

CVE-2025-48861 describes a vulnerability in the Task API endpoint of the ctrlX OS setup mechanism, where an unauthenticated, remote attacker could access and exfiltrate internal application data (e.g., debug logs and the version of installed apps). Public sources consistently tie the issue to ina...

CVE-2025-48861

A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to access and extract internal application data, including potential debug logs and the version of installed apps...

CVE-2025-50862

The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB backup on rooted or debug-enabled devices. This presents a risk of user data exposure...

CVE-2025-50862

The Lotus Cars Android app (com.lotus.carsdomestic.intl) version 1.2.8 is vulnerable to data exfiltration due to the allowBackup=true flag being set in its manifest. This configuration allows unauthorized actors to extract user data via ADB backup on devices that are rooted or have debug mode ena...