7878 matches found
MAL-2025-7132 Malicious code in @com-td-aacs/td (npm)
The package @com-td-aacs/td was found to contain malicious code...
Malicious code in uolpainelcloud-painelcloud-host-uol-com-br (npm)
The package uolpainelcloud-painelcloud-host-uol-com-br was found to contain malicious code...
Malicious code in com.nosuchstudio.rtltmpro (npm)
The package com.nosuchstudio.rtltmpro was found to contain malicious code...
MAL-2025-17327 Malicious code in com.microsoft.azure.spatial-anchors-sdk.windows (npm)
The package com.microsoft.azure.spatial-anchors-sdk.windows was found to contain malicious code...
MAL-2025-17318 Malicious code in com.digmap.voicerecog (npm)
The package com.digmap.voicerecog was found to contain malicious code...
Malicious code in @zalastax/nolb-com_w (npm)
The package @zalastax/nolb-comw was found to contain malicious code...
Malicious code in eaze.com (npm)
The package eaze.com was found to contain malicious code...
MAL-2025-7137 Malicious code in @corptools-frontend/northwestregisteredagent.com (npm)
The package @corptools-frontend/northwestregisteredagent.com was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-10969 Malicious code in @zalastax/nolb-com_v (npm)
The package @zalastax/nolb-comv was found to contain malicious code...
Malicious code in @com-td-aacs/td (npm)
The package @com-td-aacs/td was found to contain malicious code...
Malicious code in begin.com (npm)
The package begin.com was found to contain malicious code...
CVE-2025-8745
CVE-2025-8745 affects Weee RICEPO App 6.17.77 on Android, specifically the com.ricepo.app component. The vulnerability arises from improper export of AndroidManifest.xml handling, enabling a local-attack impact (confidentiality impacted). Exploitation details are publicly disclosed; vendor was co...
CVE-2025-55014
The YouDao plugin for StarDict, as used in stardict 3.0.7+git20220909+dfsg-6 in Debian trixie and elsewhere, sends an X11 selection to the dict.youdao.com and dict.cn servers via cleartext HTTP...
UBUNTU-CVE-2025-55014
The YouDao plugin for StarDict, as used in stardict 3.0.7+git20220909+dfsg-6 in Debian trixie and elsewhere, sends an X11 selection to the dict.youdao.com and dict.cn servers via cleartext HTTP...
TVB Big Big Shop App security vulnerability
TVB Big Big Shop App is a mobile shopping application of Television Broadcasts TVB Corporation of Hong Kong, China. A security vulnerability exists in TVB Big Big Shop App version 2.9.0, which originates from an improper export of Android application components due to misuse of the file...
Caixin News App security vulnerability
Caixin News App is a news app application from China Caixin Caixin News. A security vulnerability exists in Caixin News App version 8.0.1, which originates from an improper export of Android application components due to misuse of the file AndroidManifest.xml in the component com.caixin.news...
CVE-2025-7865
A vulnerability was found in thinkgem JeeSite up to 5.12.0. It has been declared as problematic. This vulnerability affects the function xssFilter of the file src/main/java/com/jeesite/common/codec/EncodeUtils.java of the component XSS Filter. The manipulation of the argument text leads to cross...
MAL-2025-5905 Malicious code in crypto-com-developer-platform-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3ba03d0d0285dec410f541b8e7fb12a809792658d08b88105efe3ecf507350b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in crypto-com-developer-platform-client
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
