10952 matches found
MAL-2025-6765 Malicious code in tableau-redirection-service (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6390 Malicious code in eslint-config-pdffiller-typescript (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd433611287b0e5010c855eaeac600cc58e87febefac7a8fdcb27568a25d29f2 The OpenSSF Package Analysis project identified 'eslint-config-pdffiller-typescript' @ 999.0.0 npm as malicious. It is considered malicious...
Malicious code in component-detection (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f3a39749aff9077de404b02560689e90881fa26e3c3b9880016fb91af8700683 The OpenSSF Package Analysis project identified 'component-detection'...
Malicious code in zoop-web-sdk (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6688 Malicious code in @sangith/eslint-config (npm)
The package communicates with a domain associated with malicious activity...
Everest Ransomware Claims Mailchimp as New Victim in Relatively Small Breach
Everest ransomware claims Mailchimp breach, leaks 943,000 lines of data. While limited in size, it adds to a spike in global ransomware activity this July...
Malicious code in icaret (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b2390fae7771a778a8bf020a3313113b56c56383c2178d916748a8d959678c9e The OpenSSF Package Analysis project identified 'icaret' @ 0.0.1 rubygems as malicious. It is considered malicious because: - The package...
MAL-2025-6746 Malicious code in nubank-www-latam-commons (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f6ef98f115341b4b410449098489bee4471969a706dfe619a9d7704d26fa5a1f The OpenSSF Package Analysis project identified...
CVE-2025-8192
There exists a TOCTOU race condition in TvSettings AppRestrictionsFragment.java that lead to start of attacker supplied activity in Settings’ context, i.e. system-uid context, thus lead to launchAnyWhere. The core idea is to utilize the time window between the check of Intent and the use to Inten...
Google Android TV 安全漏洞
Google Android TV is a television operating system application from the American company Google Google. Google Android TV suffers from a security vulnerability that can be exploited by an attacker that may result in arbitrary activity being initiated...
PT-2025-31495 · Unknown · Tvsettings
Name of the Vulnerable Software and Affected Versions: TvSettings affected versions not specified Description: A TOCTOU race condition exists in AppRestrictionsFragment.java that allows an attacker to start a malicious activity within the Settings application's system-uid context, leading to the...
Malicious code in enkryptcom (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6781 Malicious code in weavejs-backend (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in weavejs-backend (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in spendesk (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in tms-spike (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in docusaurus-theme (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in deno-r4-basic (npm)
The package communicates with a domain associated with malicious activity...