37643 matches found
Malicious code in @hd-team/app-dnpkg-eight (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36ebbb10d70e38e5772506ebd2604502a39d4c462730a4a1f2c4f21147959af9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @hd-team/app-dnpkg-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30c16d5b694328dc82c0f6456769dae351790990437b7411f9e3a868ebf48dac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-14570 Malicious code in @hd-team/app-dnpkg-eight (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36ebbb10d70e38e5772506ebd2604502a39d4c462730a4a1f2c4f21147959af9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @hd-team/app-dnpkg-ten (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39fc060cffde63f6797eaa1eb715dbfec4a108f1c8d4b54d6ed6b63072bd9d80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-14572 Malicious code in @hd-team/app-dnpkg-ten (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39fc060cffde63f6797eaa1eb715dbfec4a108f1c8d4b54d6ed6b63072bd9d80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-14573 Malicious code in @hd-team/app-dnpkg-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30c16d5b694328dc82c0f6456769dae351790990437b7411f9e3a868ebf48dac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2026-26897
An issue in EcoOnline EHS com.airsweb.v10 application for Android, version 0.2.499 allows a remote attacker to obtain sensitive information and execute arbitrary code via the AndroidManifest.xml component...
CVE-2026-26899
An issue was discovered in luci-app-https-dns-proxy on OpenWrt PR 15 2026-01-17. The setInitAction function in /usr/libexec/rpcd/luci.https-dns-proxy allows authenticated users to execute arbitrary shell commands via shell metacharacters in the name parameter...
SUSE CVE-2026-61792
Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a project administrator can read files outside their repository through the App store metadata download feature, which resolves attacker-influenced paths without adequately...
Malicious Package
Overview @hd-team/app-dnpkg-prod is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
Malicious Package
Overview @hd-team/app-dnpkg-eight is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious Package
Overview @hd-team/app-dnpkg-test is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
Malicious Package
Overview @hd-team/app-dnpkg-ten is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...
Malicious Package
Overview @hd-team/app-dnpkg-beta is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
Malicious Package
Overview @hd-team/app-impkg-test is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
Malicious Package
Overview @hd-team/app-impkg-prod is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
Malicious Package
Overview @hd-team/app-dnpkg-three is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
CVE-2026-27330
Unauthenticated Broken Access Control in Mobile App for WooCommerce = 0.4.62 versions...
