MAL-2025-48969 Malicious code in @i22-td-smarthome/component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 231c1be0a2029cd552d25b2d4b2c9cbfa6879f11a564134ff8a89fb5f27b41e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2022-7723

Malicious code in bioql PyPI...

Malicious code in kickass-component-library (npm)

The package kickass-component-library was found to contain malicious code...

Malicious code in ideainvest-component-library (npm)

The package ideainvest-component-library was found to contain malicious code...

Malicious code in bank-component-library (npm)

The package bank-component-library was found to contain malicious code...

MAL-2025-15452 Malicious code in bank-component-library (npm)

The package bank-component-library was found to contain malicious code...

MAL-2025-24448 Malicious code in kickass-component-library (npm)

The package kickass-component-library was found to contain malicious code...

MAL-2025-25224 Malicious code in lib-react-component-page-notifications (npm)

The package lib-react-component-page-notifications was found to contain malicious code...

MAL-2025-22959 Malicious code in ideainvest-component-library (npm)

The package ideainvest-component-library was found to contain malicious code...

MAL-2025-9235 Malicious code in @plattenbau/component-library (npm)

The package @plattenbau/component-library was found to contain malicious code...

Malicious code in tools-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8430b3270cb2769c8afa5686cc7ed09d5be1fe3a5d680fd3887e3b2a1279e3f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-44148

Cross Site Scripting XSS vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code via the failure.aspx component...

CVE-2024-40462

An issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the SETTINGSVATIGATOR.EXE component...

CVE-2024-40461

An issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the STOCKORDERENTRY.EXE component...

Malicious code in trueye-component-library (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4201 Malicious code in trueye-component-library (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2017-20157

A vulnerability was found in Ariadne Component Library up to 2.x. It has been classified as critical. Affected is an unknown function of the file src/url/Url.php. The manipulation leads to server-side request forgery. Upgrading to version 3.0 is able to address this issue. It is recommended to...

Malicious code in syf-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aaf53164384bcbeeceafc8ee843317d9daac2a3f5fe99a0692b9f572f3fead3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7986 Malicious code in syf-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aaf53164384bcbeeceafc8ee843317d9daac2a3f5fe99a0692b9f572f3fead3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @the-platform-group/component-library (npm)

--- -= Per source details. Do not edit below this line.=-...