LemonOS security vulnerabilities

LemonOS is an operating system in the Lemon OS open source. A security vulnerability exists in LemonOS nightly-2024-07-12 and earlier versions, which stems from a stack buffer overflow due to incorrect manipulation of the parameter chunkSize in the file /Applications/Steal/main.cpp...

MAL-2025-6901 Malicious code in @angular_devkit/build_angular (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in @angular_devkit/build_angular (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

CVE-2025-53249

Cross-Site Request Forgery CSRF vulnerability in hakeemnala Build App Online build-app-online allows Cross Site Request Forgery.This issue affects Build App Online: from n/a through = 1.0.23...

Malicious code in adform-cli-build (npm)

The package adform-cli-build was found to contain malicious code...

Malicious code in less-update-kaus-build (npm)

The package less-update-kaus-build was found to contain malicious code...

Malicious code in build-system (npm)

The package build-system was found to contain malicious code...

Malicious code in build-tectonic-bioinformatics-stratigraphy (npm)

The package build-tectonic-bioinformatics-stratigraphy was found to contain malicious code...

@cnbritain/merlin-www-build-tools (0.1.2), auto_cep (>=1.0.0, <=1.0.2) +5 more potentially affected by unknown CVE via browsersync (0.0.1-security)

browsersync NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on browsersync and may be impacted: - @cnbritain/merlin-www-build-tools 0.1.2 - autocep =1.0.0, =1.0.114, =1.0.0, =1.0.0, =1.0.0, =1.0.2 Source cves: unknown CVE Source...

MAL-2025-20610 Malicious code in fis-msprd-react-build (npm)

The package fis-msprd-react-build was found to contain malicious code...

Malicious code in build-dendrochronology-meteor-rollup (npm)

The package build-dendrochronology-meteor-rollup was found to contain malicious code...

Malicious code in build-extremophile-hermes-mysql (npm)

The package build-extremophile-hermes-mysql was found to contain malicious code...

MAL-2025-25574 Malicious code in loom-plugin-build-library (npm)

The package loom-plugin-build-library was found to contain malicious code...

Malicious code in graphql-jest-cypress-build (npm)

The package graphql-jest-cypress-build was found to contain malicious code...

Malicious code in pogo-build (npm)

The package pogo-build was found to contain malicious code...

MAL-2025-25578 Malicious code in loom-plugin-package-build (npm)

The package loom-plugin-package-build was found to contain malicious code...

Malicious code in loom-plugin-package-build (npm)

The package loom-plugin-package-build was found to contain malicious code...

Malicious code in umbra-saturnology-build-elara (npm)

The package umbra-saturnology-build-elara was found to contain malicious code...

Malicious code in barnard-ini-cryovolcano-build (npm)

The package barnard-ini-cryovolcano-build was found to contain malicious code...

Malicious code in arcgis-canc4isr-build (npm)

The package arcgis-canc4isr-build was found to contain malicious code...