10946 matches found
Malicious code in elasticsearch-8.x (npm)
The package communicates with a domain associated with malicious activity...
CVE-2025-7426
Information disclosure and exposure of authentication FTP credentials over the debug port 1604 in the MINOVA TTA service. This allows unauthenticated remote access to an active FTP account containing sensitive internal data and import structures. In environments where this FTP server is part of...
CVE-2025-7426
The CVE-2025-7426 entry relates to MINOVA TTA, where the FTP credentials are exposed through the debug port 1604 on the MINOVA TTA service. This allows unauthenticated remote access to an active FTP account and could enable data manipulation or extraction in automated processes (EDI/data integrat...
CVE-2025-7426 MINOVA TTA Information Disclosure and Credential Exposure
Information disclosure and exposure of authentication FTP credentials over the debug port 1604 in the MINOVA TTA service. This allows unauthenticated remote access to an active FTP account containing sensitive internal data and import structures. In environments where this FTP server is part of...
PT-2025-34601 · Unknown · Minova Tta
Name of the Vulnerable Software and Affected Versions: MINOVA TTA version 11.17.0 Description: The MINOVA TTA service exposes authentication FTP credentials through debug port 1604, allowing unauthenticated remote access to active FTP accounts containing sensitive internal data and import...
MAL-2025-41346 Malicious code in @spdf/astrotheme (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5496f51f1a8ab6eec096478b8236db5a53653d13cf6b08c21f9fe3b2bce4b414 The OpenSSF Package Analysis project identified '@spdf/astrotheme' @ 0.0.1 npm as malicious. It is considered malicious because: - The package...
MAL-2025-41406 Malicious code in server_msg (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c915f51661674b9cbfd2e897a3d15c0682ceb1ddd99b4b6b70e3d9eee48f1c3 Any computer that has this package installed or running should be considered...
Malicious code in typescript-5.1 (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41416 Malicious code in typescript-5.1 (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41415 Malicious code in typescript-5.0 (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41414 Malicious code in typescript-4.9 (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in typescript-4.9 (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in typescript-4.8 (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41398 Malicious code in ng-tds (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b3294da0f9faffb8ba69b152216b52a8aa4ebcf64678bcd336c917b3e054530d The OpenSSF Package Analysis project identified 'ng-tds' @...
MAL-2025-41345 Malicious code in prettier-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dd4a56ce83136ba0c08709c38d11bee44b0351d7dd9c5bca68b457fcb1b44be9 The OpenSSF Package Analysis project identified 'prettier-v2' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...
Malicious code in this-should-be-ignored (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b64896576ac7254afb7e1202835ec4f39b5b64af2cb380a7bf3b172deba75497 The OpenSSF Package Analysis project identified...
Malicious code in typescript-5.4 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ebff3cac791b9745fe1807a98ab1bf33dcd334bba210634fd691d4451d50f179 The OpenSSF Package Analysis project identified 'typescript-5.4' @...
Malicious code in typespec-http-dispatcher (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fb7c439ba2209388ade9aba27b75e50772bef4afa861aaaf5b7abf6b447a1620 The OpenSSF Package Analysis project identified...
Malicious code in typescript-5.3 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 22e5eb382ae93ec26870214b5e9a2d6b039c55967a550969c2ccdf758b96f911 The OpenSSF Package Analysis project identified 'typescript-5.3' @...