MAL-2025-41325 Malicious code in rush-cyclic-dep-2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8e5cc5e314974fca4f3bebd4496f775715aaac26a94fcde395ec10bae8ac3758 The OpenSSF Package Analysis project identified 'rush-cyclic-dep-2' @...

MAL-2025-33591 Malicious code in socket-first-level-dep-1 (npm)

The package socket-first-level-dep-1 was found to contain malicious code...

Malicious code in socket-first-level-dep (npm)

The package socket-first-level-dep was found to contain malicious code...

Malicious code in socket-first-level-dep-1 (npm)

The package socket-first-level-dep-1 was found to contain malicious code...

Malicious code in local-dep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 387d97d2771b4d02eb1e07831089413d12a5433a784594be2b4b701e5b4b960c The OpenSSF Package Analysis project identified 'local-dep' @ 7.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6680 Malicious code in local-dep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 387d97d2771b4d02eb1e07831089413d12a5433a784594be2b4b701e5b4b960c The OpenSSF Package Analysis project identified 'local-dep' @ 7.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2011-10008

A stack-based buffer overflow vulnerability exists in MPlayer Lite r33064 due to improper bounds checking when handling M3U playlist files containing long http:// URL entries. An attacker can craft a malicious .m3u file with a specially formatted URL that triggers a stack overflow when processed ...

CVE-2011-10008

CVE-2011-10008 affects MPlayer Lite (r33064). A stack-based buffer overflow arises from improper bounds checking when processing M3U playlists containing long http:// URLs, exploitable via drag-and-drop to trigger an overflow. This can allow arbitrary code execution with the attacker’s privileges...

PT-2025-31529 · Undefined · Undefined

A stack-based buffer overflow vulnerability exists in MPlayer Lite r33064 due to improper bounds checking when handling M3U playlist files containing long http:// URL entries. An attacker can craft a malicious .m3u file with a specially formatted URL that triggers a stack overflow when processed ...

Malware in one-fixed-dep-bins

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in dep-confusion-poc-monke

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in dep-confusion-poc-monke (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd5eadc84c6eaa4f7eb92319cac88bbe0057e1eb86646846287104d5d7d8f9c0 Any computer that has this package installed or running should be considered...

Malware in third-party-dep-b

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in third-party-dep-a

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in dep-b

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2024-50611

CycloneDX cdxgen through 10.10.7, when run against an untrusted codebase, may execute code contained within build-related files such as build.gradle.kts, a similar issue to CVE-2022-24441. cdxgen is used by, for example, OWASP dep-scan. NOTE: this has been characterized as a design limitation,...

CVE-2013-2554

Unspecified vulnerability in Microsoft Windows 7 allows attackers to bypass the ASLR and DEP protection mechanisms via unknown vectors, as demonstrated against Firefox by VUPEN during a Pwn2Own competition at CanSecWest 2013, a different vulnerability than CVE-2013-0787...

Malicious code in dep-b (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bf502f4603015140b50f4fa201c46f256eefa3553e9a6f91ae9304bb42966d6 Any computer that has this package installed or running should be considered...

Malicious code in dep-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 880d5ea6c43eb50d284249180eca08fc64f4f7efa0a1e1abaaf234acfce4b6d6 The OpenSSF Package Analysis project identified 'dep-poc' @ 1.0.3 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2025-1672 Malicious code in dep-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 880d5ea6c43eb50d284249180eca08fc64f4f7efa0a1e1abaaf234acfce4b6d6 The OpenSSF Package Analysis project identified 'dep-poc' @ 1.0.3 npm as malicious. It is considered malicious because: - The package communicat...