Malicious code in paychex-grunt-configs (npm)

The package paychex-grunt-configs was found to contain malicious code...

MAL-2025-28938 Malicious code in paychex-grunt-configs (npm)

The package paychex-grunt-configs was found to contain malicious code...

MAL-2025-17103 Malicious code in cli-configs (npm)

The package cli-configs was found to contain malicious code...

MAL-2025-11319 Malicious code in @zalastax/nolb-eslint-configs (npm)

The package @zalastax/nolb-eslint-configs was found to contain malicious code...

MAL-2025-23951 Malicious code in json-configs (npm)

The package json-configs was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2025-38132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - linux - coresight: holding cscfgcsdevlock while removing cscfg from csdev There'll be possible race scenario for coresight config: CPU0 CPU1 perf...

Malware in @sme-configs/karma-coverage

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in acronis-platform-configs (npm)

The package communicates with a domain associated with malicious activity...

CVE-2022-30971

Jenkins Storable Configs Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2022-30972

A cross-site request forgery CSRF vulnerability in Jenkins Storable Configs Plugin 1.0 and earlier allows attackers to have Jenkins parse a local XML file e.g., archived artifacts that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery...

CVE-2020-2277

Jenkins Storable Configs Plugin 1.0 and earlier allows users with Job/Read permission to read arbitrary files on the Jenkins controller...

CVE-2024-56428

The local iLabClient database in itech iLabClient 3.7.1 allows local attackers to read cleartext credentials from the CONFIGS table for their servers configured in the client...

CVE-2024-56428: Cleartext Storage of Sensitive Information

The local iLabClient database in itech iLabClient 3.7.1 allows local attackers to read cleartext credentials from the CONFIGS table for their servers configured in the client...

itech iLabClient security vulnerability

itech iLabClient is a powerful sender-side lab data receiving software from itech. A security vulnerability exists in itech iLabClient version 3.7.1 that originates from a local attacker being able to read plaintext credentials in the CONFIGS table...

CVE-2024-56428

The itech iLabClient version 3.7.1 contains a vulnerability where a local attacker can read cleartext credentials from the CONFIGS table within the local iLabClient database. This database, an instance of Apache Derby , stores server configuration data in plain text. An attacker can access these ...

Malware in @nomicsfondation/hardhat-configs

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

PT-2025-27718

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A race condition scenario exists in the Linux kernel's coresight configuration. This issue arises when two CPUs interact with the configuration simultaneously, potentially leading to a...

Malicious code in configs-web-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e2873a2ee1e0748ca75f7e661e6961df7a4522dae8e7e658c47cfbab20eff7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-7259 · Net Snmp · Net-Snmp

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the following functions: snmp config when, netsnmp config process memory list,...

Malicious code in hardhat-configs (npm)

This package exfiltrates sensitive Ethereum-related data such as mnemonics and private keys to an attacker-controlled server. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98317ddb2bbad731c7576eb5f64b3a91f7e6f7bd135fa5ef05b7a2ad3da15992 Any computer that has this...