MAL-2025-9031 Malicious code in @malware-test-twins-atlas-blest-demon/test-mlw3-twins-atlas-blest-demon (npm)

The package @malware-test-twins-atlas-blest-demon/test-mlw3-twins-atlas-blest-demon was found to contain malicious code...

MAL-2025-15008 Malicious code in atlas-morgan-antares-remark (npm)

The package atlas-morgan-antares-remark was found to contain malicious code...

MAL-2025-21775 Malicious code in got-atlas-inquirer-bulma (npm)

The package got-atlas-inquirer-bulma was found to contain malicious code...

MAL-2025-15894 Malicious code in blueshift-hapi-blaze-atlas (npm)

The package blueshift-hapi-blaze-atlas was found to contain malicious code...

MAL-2025-15007 Malicious code in atlas-data (npm)

The package atlas-data was found to contain malicious code...

MAL-2025-38999 Malicious code in webdriverio-antimatter-pegasus-atlas (npm)

The package webdriverio-antimatter-pegasus-atlas was found to contain malicious code...

MAL-2025-18668 Malicious code in dotenv-safe-kastra-atlas-perturbation (npm)

The package dotenv-safe-kastra-atlas-perturbation was found to contain malicious code...

Malicious code in atlas-charts (npm)

The package atlas-charts was found to contain malicious code...

CVE-2025-54428 RevelaCode exposes Sensitive MongoDB Atlas URI in .env (potential credential leak)

RevelaCode is an AI-powered faith-tech project that decodes biblical verses, prophecies and global events into accessible language. In versions below 1.0.1, a valid MongoDB Atlas URI with embedded username and password was accidentally committed to the public repository. This could allow...

CVE-2025-54428 RevelaCode exposes Sensitive MongoDB Atlas URI in .env (potential credential leak)

RevelaCode is an AI-powered faith-tech project that decodes biblical verses, prophecies and global events into accessible language. In versions below 1.0.1, a valid MongoDB Atlas URI with embedded username and password was accidentally committed to the public repository. This could allow...

CVE-2025-54428

CVE-2025-54428 affects RevelaCode prior to 1.0.1. A valid MongoDB Atlas URI with embedded credentials was committed to the public repository, enabling potential unauthorized access to production or staging databases and possible data exfiltration, modification, or deletion. The issue is resolved ...

RevelaCode 安全漏洞

RevelaCode is an AI program for interpreting Bible verses by the individual developer Musombi William. A security vulnerability exists in versions of RevelaCode prior to 1.0.1, which stems from a MongoDB Atlas URI disclosure that could lead to unauthorized access to the database...

Malicious code in assets-atlas-editor (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f270720b1154e7b5c4a4300f1817bc922d5e372148d26a57b4b9d0c8ee3d95b Any computer that has this package installed or running should be considered...

MAL-2025-5323 Malicious code in assets-atlas-editor (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f270720b1154e7b5c4a4300f1817bc922d5e372148d26a57b4b9d0c8ee3d95b Any computer that has this package installed or running should be considered...

Malicious code in atlas-global-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2da4219e6bc0eb3a57f45a9fef584e5c6b27af790d62395489febfeb78c5bf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4638 Malicious code in atlas-global-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2da4219e6bc0eb3a57f45a9fef584e5c6b27af790d62395489febfeb78c5bf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Trend Micro Leading the Fight to Secure AI

New MITRE ATLAS submission helps strengthen organizations’ cyber resilience...

CVE-2024-47387

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Search Atlas Group Search Atlas SEO metasync allows Stored XSS.This issue affects Search Atlas SEO: from n/a through = 1.8.2...

CVE-2023-51510

Cross-Site Request Forgery CSRF vulnerability in Atlas Gondal Export Media URLs.This issue affects Export Media URLs: from n/a through 1.0...

CVE-2023-3755

A vulnerability has been found in Creativeitem Atlas Business Directory Listing 2.13 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /home/filterlistings. The manipulation of the argument price-range leads to cross site scripting. The attack c...