Lucene search
+L

6 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/02/03 5:25 p.m.•28 views

Malicious code in llvm-vs-code-extensions.vscode-clangd (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b822fb613c3a0252eacdb48a5dea6a7b94786cc7b461e72423800257d6d650c Any computer that has this package installed or running should be considered...

6.8AI score
SaveExploits0References3
Snyk
Snyk
•added 2022/09/08 11:24 a.m.•8 views

Malicious Package

Overview vscode-clangd is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

9.8CVSS7.1AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/09/07 1:00 a.m.•10 views

Malicious code in vscode-clangd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3e05ac1fabef54ef34176e9d555cb6e63b3dfbc2241cf304ab6a1b8b3cd2cc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2022/09/07 1:00 a.m.•68 views

MAL-2022-6974 Malicious code in vscode-clangd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3e05ac1fabef54ef34176e9d555cb6e63b3dfbc2241cf304ab6a1b8b3cd2cc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSS-Fuzz
OSS-Fuzz
•added 2020/01/03 12:44 p.m.•20 views

llvm:clangd-fuzzer: Crash in clang::serialization::reader::HeaderFileInfoTrait::ReadData

Detailed Report: https://oss-fuzz.com/testcase?key=5194868125335552 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clangd-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fe69ffbbfbf Crash State:...

6.8AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2017/10/28 11:09 a.m.•22 views

llvm/clangd-fuzzer: Use-after-poison in llvm::yaml::Scanner::scanValue

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=4553604959567872 Project: llvm Fuzzer: libFuzzerllvmclangd-fuzzer Fuzz target binary: clangd-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address...

6.8AI score
SaveExploits0Affected Software1
Rows per page
Query Builder