12906 matches found
MAL-2025-41971 Malicious code in elasticsearch-8.x (npm)
The package communicates with a domain associated with malicious activity...
Linux Distros Unpatched Vulnerability : CVE-2017-7875
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-boundary heap write while...
Malicious code in @spdf/astrotheme (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5496f51f1a8ab6eec096478b8236db5a53653d13cf6b08c21f9fe3b2bce4b414 The OpenSSF Package Analysis project identified '@spdf/astrotheme' @ 0.0.1 npm as malicious. It is considered malicious because: - The package...
MAL-2025-41415 Malicious code in typescript-5.0 (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41413 Malicious code in typescript-4.8 (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41398 Malicious code in ng-tds (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b3294da0f9faffb8ba69b152216b52a8aa4ebcf64678bcd336c917b3e054530d The OpenSSF Package Analysis project identified 'ng-tds' @...
MAL-2025-41344 Malicious code in xpoc-ts-lib (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d6aabe2bdc2f87978954e778f491ee06641df1ca2ebdce2b151881f7b8c7c063 The OpenSSF Package Analysis project identified 'xpoc-ts-lib' @ 99.0....
Malicious code in website-memory (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in typescript-5.4 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ebff3cac791b9745fe1807a98ab1bf33dcd334bba210634fd691d4451d50f179 The OpenSSF Package Analysis project identified 'typescript-5.4' @...
Malicious code in typescript-6.0 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0cd1eb2749ce618a7dbf198dab8918ade0798770a8b15d51e27738bd05f3cd0 The OpenSSF Package Analysis project identified 'typescript-6.0' @...
Malicious code in typescript-5.9 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 534854085104d22f0ac766feb226c4d29eaaa0b973c0d509362f32c415af7871 The OpenSSF Package Analysis project identified 'typescript-5.9' @...
Malicious code in typescript-5.7 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 689bcb9e8006cbddd0e9e75fb20e15aa8eed88e80f083873b7e694b997d62e58 The OpenSSF Package Analysis project identified 'typescript-5.7' @...
MAL-2025-41392 Malicious code in markdown-agent (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41330 Malicious code in suppressions (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9e3b924c14ff9c22bdc7afa4f89f7d776286be2e98bbbf1554f47af0a5944dc9 The OpenSSF Package Analysis project identified 'suppressions' @ 99.0...
Malicious code in run-scenarios-helpers (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 643959f3bad134aeb7e2e5ea40f5f4c01cb16fc0ef02238b81d5f5ee1ef42970 The OpenSSF Package Analysis project identified 'run-scenarios-helper...
Malicious code in default-agent-provider (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41381 Malicious code in default-agent-provider (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in conversation-memory (npm)
The package communicates with a domain associated with malicious activity...