10116 matches found
Malicious code in che-theia-activity-tracker (npm)
The package che-theia-activity-tracker was found to contain malicious code...
MAL-2025-16870 Malicious code in che-theia-activity-tracker (npm)
The package che-theia-activity-tracker was found to contain malicious code...
CVE-2025-55010
Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.2.47, an unsafe deserialization vulnerability in the ProjectEventActvityFormatter allows admin users the ability to instantiate arbitrary php objects by modifying the event"data" field in the...
Malicious code in guppy-dev (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b56a4d108a100f12dd3aedb0e1f0f3b8007ecc181e366198a22242473696f219 The OpenSSF Package Analysis project identified 'guppy-dev' @ 2.0.0 n...
Malicious code in @azix058/design-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 00076e3fa2882cf70c07ddb3715929161c6cd4253e088b91f38c06d9612e5edc The OpenSSF Package Analysis project identified '@azix058/design-system' @ 10.0.0 npm as malicious. It is considered malicious because: - The...
MAL-2025-6870 Malicious code in @angular_devkit/build-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 053dbd5b72c824b5644482986fcc9a5caca48fcbe447f90f957e420418f2bcb4 The OpenSSF Package Analysis project identified '@angulardevkit/build-webpack' @ 99.1.1 npm as malicious. It is considered malicious because: -...
Malicious code in dependerable (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f710204dca1899f1d3c1289dee4a05e791bfd14fdbe3678e52d4caa62869d816 The OpenSSF Package Analysis project identified 'dependerable' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in microsoft-cloud-integrations (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6911 Malicious code in an-video-viewability (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6863 Malicious code in dependsalotxyz (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a6ff0f63ebfa845053f988e1f56a87392c7ea6f7907895f0551ef3ee32da38fb The OpenSSF Package Analysis project identified 'dependsalotxyz' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft
NTLM/SMB Hardening & Threat Hunt Toolkit Author: w01f...
Malicious code in recoilusagelogevent (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6954 Malicious code in recoilusagelogevent (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in moonskin (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6910 Malicious code in advanced-korean-search (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6912 Malicious code in android-app-promotion (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in rush-plugins (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6940 Malicious code in merlin-transformer (npm)
The package communicates with a domain associated with malicious activity...