10117 matches found
Malicious code in undeface-test-1 (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in amdocs-auth-package (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d16664451db45f3a8b8da108a2b38785d0a7471480df169c57b38bccde640f7 Package name mimics an Amdocs internal package dependency-confusion lure...
MAL-2025-6679 Malicious code in xo-angular-ui-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17c1ba74b83fb3a51e171948d55aa626342a1477d24f1f0f768f093cba5feef7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in internal-random (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6695 Malicious code in amdocs-core-package (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e196068c171b8528ec4f1f0db852ef32a7b530ecce14d79696a21c4f685c2c6 The package declares a preinstall hook that runs index.js on npm install...
Malicious code in amdocs-core-package (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e196068c171b8528ec4f1f0db852ef32a7b530ecce14d79696a21c4f685c2c6 The package declares a preinstall hook that runs index.js on npm install...
MAL-2025-6765 Malicious code in tableau-redirection-service (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6390 Malicious code in eslint-config-pdffiller-typescript (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd433611287b0e5010c855eaeac600cc58e87febefac7a8fdcb27568a25d29f2 The OpenSSF Package Analysis project identified 'eslint-config-pdffiller-typescript' @ 999.0.0 npm as malicious. It is considered malicious...
Malicious code in component-detection (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f3a39749aff9077de404b02560689e90881fa26e3c3b9880016fb91af8700683 The OpenSSF Package Analysis project identified 'component-detection'...
Malicious code in zoop-web-sdk (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6688 Malicious code in @sangith/eslint-config (npm)
The package communicates with a domain associated with malicious activity...
Everest Ransomware Claims Mailchimp as New Victim in Relatively Small Breach
Everest ransomware claims Mailchimp breach, leaks 943,000 lines of data. While limited in size, it adds to a spike in global ransomware activity this July...
Malicious code in icaret (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b2390fae7771a778a8bf020a3313113b56c56383c2178d916748a8d959678c9e The OpenSSF Package Analysis project identified 'icaret' @ 0.0.1 rubygems as malicious. It is considered malicious because: - The package...
MAL-2025-6746 Malicious code in nubank-www-latam-commons (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f6ef98f115341b4b410449098489bee4471969a706dfe619a9d7704d26fa5a1f The OpenSSF Package Analysis project identified...
CVE-2025-8192
There exists a TOCTOU race condition in TvSettings AppRestrictionsFragment.java that lead to start of attacker supplied activity in Settings’ context, i.e. system-uid context, thus lead to launchAnyWhere. The core idea is to utilize the time window between the check of Intent and the use to Inten...
PT-2025-31495 · Unknown · Tvsettings
Name of the Vulnerable Software and Affected Versions: TvSettings affected versions not specified Description: A TOCTOU race condition exists in AppRestrictionsFragment.java that allows an attacker to start a malicious activity within the Settings application's system-uid context, leading to the...
Google Android TV 安全漏洞
Google Android TV is a television operating system application from the American company Google Google. Google Android TV suffers from a security vulnerability that can be exploited by an attacker that may result in arbitrary activity being initiated...
Malicious code in enkryptcom (npm)
The package communicates with a domain associated with malicious activity...