27 matches found
io.quarkus:quarkus-reactive-mssql-client (4.0.0.beta1), io.quarkus:quarkus-reactive-mssql-client-deployment (4.0.0.beta1) +5 more potentially affected by CVE-2026-102462 via io.vertx:vertx-mssql-client (>=5.1.2, <=5.1.9)
io.vertx:vertx-mssql-client MAVEN version =5.1.2, =4.0.0, =5.1.2, =5.1.2, =5.1.9 - vn.io.lcx:common-lib 4.1.0.lcx - vn.io.lcx:processor 4.1.0.lcx Source cves: CVE-2026-102462 Source advisory: MEND:CVE-2026-102462...
Malicious Package
Overview raise-common-lib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in raise-common-lib (npm)
Source: amazon-inspector 7401fb7c3259e43181ef51ca47b984450f7a849fed5a9598e6131b4c0ed5d2bb The package's rich-text editor module hardcodes an Azure OpenAI endpoint https://aidevused.openai.azure.com/ and an api-key in esm2015/lib/form/richtexteditor/ai-config.js and in the UMD bundle...
Malicious code in @louisvuitton/configurator-common-lib (npm)
--- Credit: OpenSSF source...
Malicious code in @louisvuitton/configurator-common-lib (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @mcconnect/mcc-common-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be912fccd62d30a685cdb31baa7155b91a283043d74447d1d7099ffbaa73b1dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview @mcconnect/mcc-common-lib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malware in @mcconnect/mcc-common-lib
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2020-37110
60CycleCMS 2.5.2 contains an SQL injection vulnerability in news.php and common/lib.php that allows attackers to manipulate database queries through unvalidated user input. Attackers can exploit vulnerable query parameters like 'title' to inject malicious SQL code and potentially extract or modif...
60CycleCMS SQL Injection Vulnerability
60CycleCMS is an open-source content management system developed by 60CycleCMS. Version 2.5.2 of 60CycleCMS has a SQL injection vulnerability. This vulnerability stems from SQL injections in the news.php and common/lib.php files, which could allow attackers to manipulate database queries with...
Malicious Package
Overview zis-common-lib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malware in zis-common-lib
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
EUVD-2026-3048
Malicious code in zis-common-lib npm...
Malicious code in zis-common-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2451078ffe3af1f8434b90bf1bf37496b06e67c7176517b74e2d2bbcd99f66b9 The package zis-common-lib was found to contain malicious code. Source: ghsa-malware 0c8e0e04c800d47fc8b192d79f8c5547571bb67dfe68e9653c357c9aac4c6b03...
MAL-2026-320 Malicious code in zis-common-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2451078ffe3af1f8434b90bf1bf37496b06e67c7176517b74e2d2bbcd99f66b9 The package zis-common-lib was found to contain malicious code. Source: ghsa-malware 0c8e0e04c800d47fc8b192d79f8c5547571bb67dfe68e9653c357c9aac4c6b03...
MAL-2025-191563 Malicious code in @ukg-oneapp/common-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b059e51ff63f10ad83b16a1eeebedec98eaba6ac470197fe119a0e5e404af75d The package @ukg-oneapp/common-lib was found to contain malicious code...
Malicious code in @ukg-oneapp/common-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b059e51ff63f10ad83b16a1eeebedec98eaba6ac470197fe119a0e5e404af75d The package @ukg-oneapp/common-lib was found to contain malicious code...
Malicious code in vis-common-lib (npm)
The package vis-common-lib was found to contain malicious code...
MAL-2025-788 Malicious code in @wfps/wfps-common-lib (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in react-common-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f725d89d41b69b32bcff68f5c43863001fe8a47bf052f1efac3808dbd56f85f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...