10528 matches found
HSEC-2024-0007 Sign extension error in the AArch64 NCG
Sign extension error in the AArch64 NCG Arithmetic operations may result in incorrect runtime results on the native aarch64 backend. For the most part, this bug only causes availability and data integrity issues. However, in some circumstances, it may result in other, more complicated security...
ZOHO ManageEngine Analytics Plus SQL Injection Vulnerability
ZOHO ManageEngine Analytics Plus is a self-service IT analytics solution from ZOHO. Get a better view of your IT data with rich visualizations and dashboards. A SQL injection vulnerability exists in ZOHO ManageEngine Analytics Plus. An attacker can use this vulnerability to view, add, modify, or...
Malicious code in @walletify/backend (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f030c1111fb06c5daf5d9b522a95b60e2059a449d880165d538d494c7ea99993 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-175384
Malicious code in @walletify/backend npm...
Malicious Package
Overview @walletify/backend is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-185350 Malicious code in @walletify/backend (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f030c1111fb06c5daf5d9b522a95b60e2059a449d880165d538d494c7ea99993 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-176847
Malicious code in quasar-backend-altair-callback npm...
EUVD-2025-177845
Malicious code in middleware-backend-async-oortcloud npm...
Malicious code in nextjs-sagitta-backend-nightwatch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d30433018a5273b06b2934b8e3c126a9eacec0a1c317401dac6dd8848fadecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177022
Malicious code in promise-aurora-kastra-backend npm...
Malicious code in quasar-backend-altair-callback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35756d40a25a4bdb4052a566e3b66b63592849244ddafa63fe0a0df31a150e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178194
Malicious code in kinetic-backend-technocracy-archaeometry npm...
EUVD-2025-180155
Malicious code in backend-exec-husky-public npm...
EUVD-2025-180531
Malicious code in abiogenesis-proxima-astro-backend npm...
EUVD-2025-178888
Malicious code in flare-backend-jsonp-orogeny npm...
MAL-2025-185557 Malicious code in ariel-backend-css-loader-aldebaran (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8985f6f4b26a752bfd23a32fbbf39c2aab5c6b48f599eb0f46f6398a6833b115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188268 Malicious code in nextjs-sagitta-backend-nightwatch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d30433018a5273b06b2934b8e3c126a9eacec0a1c317401dac6dd8848fadecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187289 Malicious code in hawkingradiation-backend-farout-despina (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e00a156c0cf07c9efdab34c198a6df2120800c4426e9371ec2bb80ebf0b4cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...