10116 matches found
Malicious code in dex-creator (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a45a7bed266fa05cf91945ed835fdf225abff89dd8dcde90c90dc769b04e15e3 The OpenSSF Package Analysis project identified 'dex-creator' @ 2.0.0...
Malicious code in @bgrc/kyc-theme (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 491ac58a40b45ff06a00ad44a33a15bd95394c8fde64034d150fb31433a18380 The OpenSSF Package Analysis project identified '@bgrc/kyc-theme' @ 9000.0.2 npm as malicious. It is considered malicious because: - The package...
Malicious code in across-indexer-monorepo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b8fef241ea15f212acce31cd8bcc9d561a7f8a55c8367d778cca91c189d8a3a7 The OpenSSF Package Analysis project identified 'across-indexer-monorepo' @ 7.1.1 npm as malicious. It is considered malicious because: - The...
CVE-2025-10815
creationtimestamp| type| source ---|---|--- 2025-09-22 21:13:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115250010527648121...
Malicious code in skiko-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 381c5141fd91ab3795d9f9dba07327b46acb9f0f3a869e49411412f5bcbe6ea2 The OpenSSF Package Analysis project identified 'skiko-js' @ 10.0.1 npm as malicious. It is considered malicious because: - The package...
CVE-2025-57452
In realme BackupRestore app v15.1.122810c08250314, improper URI scheme handling in com.coloros.pc.PcToolMainActivity allows local attackers to cause a crash and potential XSS via crafted ADB intents...
CVE-2025-57452
The CVE-2025-57452 entry affects the realme BackupRestore app, version 15.1.12_2810c08_250314, due to improper URI scheme handling in the component com.coloros.pc.PcToolMainActivity. This vulnerability could allow local attackers to trigger a crash and potential cross-site scripting (XSS) via cra...
MAL-2025-47439 Malicious code in porscheofficial (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in tml-navigation (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in lynx-dev (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-47435 Malicious code in lynx-dev (npm)
The package communicates with a domain associated with malicious activity...
CVE-2025-59476
A flaw was found in Jenkins. Improper restriction of characters inserted from user-specified content in log messages allows attackers to control log message content and misled administrators reviewing log output or hide malicious activities. Mitigation Mitigation for this issue is either not...
Malicious code in windap-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7911cd6f3ec328520fbdf9a40c8fbdaf0a0de4c92577870eaaabbb0c5f6868a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47424 Malicious code in windap-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7911cd6f3ec328520fbdf9a40c8fbdaf0a0de4c92577870eaaabbb0c5f6868a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @pc-analytics-filter/core (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdfc2209384455df77ab889ef6aa71c136ff6c7c2f43bb529d93568e71917d2f Any computer that has this package installed or running should be considered...
Malicious code in kreme-circuits (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 115a80b8aadb1029e4fdf7ec27a30991a73af718770b70a89211f740bbad9c40 Any computer that has this package installed or running should be considered...
MAL-2025-47403 Malicious code in kreme-circuits (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 115a80b8aadb1029e4fdf7ec27a30991a73af718770b70a89211f740bbad9c40 Any computer that has this package installed or running should be considered...
Malicious code in suchinind (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a328ee17c3878f22beddf954e26fea98cfcedc0377a9aae3f9382b01cb55acf Any computer that has this package installed or running should be considered...
MAL-2025-47412 Malicious code in suchinind (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a328ee17c3878f22beddf954e26fea98cfcedc0377a9aae3f9382b01cb55acf Any computer that has this package installed or running should be considered...