10946 matches found
Malicious code in propeller-solver-core (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a79fc2ce4f8dbef3a36ad1dcf36011f9d86435f347aa81ed601295d75e818b04 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-47817 Malicious code in rsi-configuration-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9a9a3e53f5018108f5ce8abbccd7313ccac30e61c7985e5d7d90291c30299957 The OpenSSF Package Analysis project identified 'rsi-configuration-module' @ 1.1.2 npm as malicious. It is considered malicious because: - The...
Noisy Networks, Nosy Neighbors: Inferring Privacy Invasive Information from Encrypted Wireless Traffic
This thesis explores the extent to which passive observation of wireless traffic in a smart home environment can be used to infer privacy-invasive information about its inhabitants. Using a setup that mimics the capabilities of a nosy neighbor in an adjacent flat, we analyze raw 802.11 packets an...
Malicious code in zenith.svg-loader (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f7d2ffc7aca71791695515d2f4c7d4cd7dae2e7767777a5a18bed84f9d94e7f Any computer that has this package installed or running should be considered...
Malicious code in test-prob-to2324 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4628b79fab4d286704a53af4e8df8cc72149ff0b04b72d4a8ec23983ed62f92d The OpenSSF Package Analysis project identified 'test-prob-to2324' @...
Malicious code in autobahn-testsuite-docker (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in metereorpreter-test2-dns (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-47858 Malicious code in pega-package-dependency (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in @discord-external/activity-iframe-sdk (npm)
The package @discord-external/activity-iframe-sdk was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security c4df7af2ceae80fdc052edf95094a378287786ae21cfec9a6104a2af2b1d9b98 This package installs a dependency hosted on a cust...
MAL-2025-47574 Malicious code in @discord-external/activity-iframe-sdk (npm)
The package @discord-external/activity-iframe-sdk was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security c4df7af2ceae80fdc052edf95094a378287786ae21cfec9a6104a2af2b1d9b98 This package installs a dependency hosted on a cust...
CVE-2025-56146
Indian Bank IndSMART Android App 3.8.1 is vulnerable to Missing SSL Certificate Validation in NuWebViewActivity...
Android checkPermissions() Privilege Escalation
The vulnerability of the checkPermissions function in the SafeActivityOptions.java module of Android operating systems is related to a violation of data protection mechanisms. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...
Malicious code in vault-hux-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f0e642811b789c4f724d3169822154751db4b210ded1f45f3eda9396725cb30e The OpenSSF Package Analysis project identified 'vault-hux-common' @ 9000.0.0 npm as malicious. It is considered malicious because: - The packag...
Malicious code in vault-api-redux-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 15cac4b456079ac507ddcba10b8fb9b258c916f8fcc7d22565567810a43d6a63 The OpenSSF Package Analysis project identified 'vault-api-redux-client' @ 9000.0.0 npm as malicious. It is considered malicious because: - The...
MAL-2025-47515 Malicious code in vault-api-redux-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 15cac4b456079ac507ddcba10b8fb9b258c916f8fcc7d22565567810a43d6a63 The OpenSSF Package Analysis project identified 'vault-api-redux-client' @ 9000.0.0 npm as malicious. It is considered malicious because: - The...
Malicious code in pc-analytics-promotion-creation-client (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4d66ab8f0d38376b6ec23e7703446b3c1d3849127ae2eb86050e41db25563bc Any computer that has this package installed or running should be considered...
Android onCreate() Privilege Escalation
The vulnerability of the onCreate function in the SelectAccountActivity.java module of Android operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...
Malicious code in spayee-micro-frontend (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16d410f61fc4213f1ca0f3f16618828e186e9c5c6b130545bdb49eb4c0d68ec5 Any computer that has this package installed or running should be considered...
Malicious code in area_cliente_front (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf45b985429114d0e3994309f09b39631d0b3c87309f6a06d75ccf0bb3f9e00a Any computer that has this package installed or running should be considered...