MAL-2025-46911 Malicious code in github-proto-repositories (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ad787034378f8dfd5ad9c74128aafad9b053f1296acc980aee3f70693f23d3c3 The OpenSSF Package Analysis project identified 'github-proto-repositories' @ 1.2.11.re9f78aa rubygems as malicious. It is considered malicious...

MAL-2025-46892 Malicious code in actions-runner-admin (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8bf5c8993e97e4a8a3f91ab4b6b7618dc0f73864793854b4458516ece843a6db The OpenSSF Package Analysis project identified 'actions-runner-admin' @ 99.99.99 rubygems as malicious. It is considered malicious because: - T...

Malicious code in blackbird-analysis (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3caeac0852a2e3b407fa0aeac57bf37bcf5d804a7cbf7fca57f612060c3a4289 The OpenSSF Package Analysis project identified 'blackbird-analysis' @ 0.2.0.r9649833ca rubygems as malicious. It is considered malicious becaus...

MAL-2025-46896 Malicious code in blackbird-analysis (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3caeac0852a2e3b407fa0aeac57bf37bcf5d804a7cbf7fca57f612060c3a4289 The OpenSSF Package Analysis project identified 'blackbird-analysis' @ 0.2.0.r9649833ca rubygems as malicious. It is considered malicious becaus...

MAL-2025-46909 Malicious code in github-kv (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5fcb11aea794afd6b87c58dee41958584041b8638848807223b0633a851e3ad1 The OpenSSF Package Analysis project identified 'github-kv' @ 0.0.1.rdbd1267 rubygems as malicious. It is considered malicious because: - The...

Malicious code in blackbird-client (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 17b0b3e98141a351fdc696be9f930f79cca353cc4bfdd71903e63226d07aac55 The OpenSSF Package Analysis project identified 'blackbird-client' @ 99.99.99 rubygems as malicious. It is considered malicious because: - The...

MAL-2025-46905 Malicious code in driftwood-client (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 82508ccb87ec67c0980aab22344944dc04b3526af72b41f9d9e7092c50c3b9c4 The OpenSSF Package Analysis project identified 'driftwood-client' @ 0.0.1.r1319997b9 rubygems as malicious. It is considered malicious because:...

MAL-2025-46893 Malicious code in aqueduct-client (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 379fca058a380a033332183e2ff704c2c9364d08fc8d550eb7a1f5171bc9221f The OpenSSF Package Analysis project identified 'aqueduct-client' @ 1.3.3 rubygems as malicious. It is considered malicious because: - The packa...

MAL-2025-46904 Malicious code in diff-analysis (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 53f5c59231a450ff5c362e5a1f69715ca48a0ee311ba81d90daa03baef384a1d The OpenSSF Package Analysis project identified 'diff-analysis' @ 0.1.0.r8ff4356 rubygems as malicious. It is considered malicious because: - Th...

Malicious code in diff-analysis (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 53f5c59231a450ff5c362e5a1f69715ca48a0ee311ba81d90daa03baef384a1d The OpenSSF Package Analysis project identified 'diff-analysis' @ 0.1.0.r8ff4356 rubygems as malicious. It is considered malicious because: - Th...

MAL-2025-46901 Malicious code in dependency-graph-platform-proto (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c8feb4336c26b61a10aec616c9f9f8777fcdd99ab55df96c82ca78bd088530b9 The OpenSSF Package Analysis project identified 'dependency-graph-platform-proto' @ 99.99.99 rubygems as malicious. It is considered malicious...

Malicious code in actions-broker (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74e6328258aafc966c6b402300419e91c804d4e8986faeb14ef8419775cb13b5 The OpenSSF Package Analysis project identified 'actions-broker' @ 99.99.99 rubygems as malicious. It is considered malicious because: - The...

MAL-2025-46900 Malicious code in delorean_client (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 91b594e6698684765fbf40d5f103e207d5e6166eeafd80ba5690100cab008a4c The OpenSSF Package Analysis project identified 'deloreanclient' @ 0.4.0.r09ee7b0 rubygems as malicious. It is considered malicious because: - T...

MAL-2025-46890 Malicious code in actions-broker (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74e6328258aafc966c6b402300419e91c804d4e8986faeb14ef8419775cb13b5 The OpenSSF Package Analysis project identified 'actions-broker' @ 99.99.99 rubygems as malicious. It is considered malicious because: - The...

MAL-2025-46899 Malicious code in console_auth (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c545bd0ca0111537f9336af6eeeef4e580a90a7468ff22cf9b1b20dd3fcf51d The OpenSSF Package Analysis project identified 'consoleauth' @ 99.99.99 rubygems as malicious. It is considered malicious because: - The packag...

MAL-2025-46906 Malicious code in egress (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee02802f5d94f135856b832109948906e7a3a39fbea753561a4d518a1d4e889f The OpenSSF Package Analysis project identified 'egress' @ 1.68.g52b0cd0 rubygems as malicious. It is considered malicious because: - The packag...

Malicious code in dependency-snapshots-api-proto (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 631057766f092650ba1257605bb896b689804a362934a08e7354ca7253f43b77 The OpenSSF Package Analysis project identified 'dependency-snapshots-api-proto' @ 99.99.99 rubygems as malicious. It is considered malicious...

VULSOVER: Vulnerability Detection Via LLM-Driven Constraint Solving

Traditional vulnerability detection methods rely heavily on predefined rule matching, which often fails to capture vulnerabilities accurately. With the rise of large language models LLMs, leveraging their ability to understand code semantics has emerged as a promising direction for achieving more...

Virtual Reality, Real Problems: a Longitudinal Security Analysis of VR Firmware

Virtual Reality VR technology is rapidly growing in recent years. VR devices such as Meta Quest 3 utilize numerous sensors to collect users' data to provide an immersive experience. Due to the extensive data collection and the immersive nature, the security of VR devices is paramount. Leading VR...

Malicious code in @callcenter-frontend/shared-types (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9f78119137abb744cf51b995b836463c88b03fb249997685f0e4a2feb7ef621e The OpenSSF Package Analysis project identified...