MAL-2026-4581 Malicious code in idlidosa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c6cba2c58d95d705af7dc5bb1c630129127835fb1ef15d4ccf43ec2818bf632 The package is purpose-built tooling to defeat exam-proctoring / lockdown software, with multiple installer-machine integrity harms triggered when th...

CVE-2024-36333

A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

MSC-2025-7179

This package version was compromised, and includes a malicious dll file that hides itself as build.py. We recommend going back to the latest safe version 0.5.14...

MSC-2025-7175

This package version was compromised, and includes a malicious dll file that hides itself as build.py. We recommend going back to the latest safe version 0.5.14...

MSC-2025-7172

This package version was compromised, and includes a malicious dll file that hides itself as build.py. We recommend going back to the latest safe version 0.5.14...

MSC-2025-6825

This package version was compromised through a phishing campaign to include a malware. It contains an install script that executes a bundled DLL file via rundll32 on Windows systems, allowing arbitrary code execution. The script also manipulates files and directories, including deleting, archivin...

MSC-2025-6744

This package version was compromised through a phishing campaign to include a malware. It contains an install script that executes a bundled DLL file via rundll32 on Windows systems, allowing arbitrary code execution. The script also manipulates files and directories, including deleting, archivin...

MSC-2025-6740

This package version was compromised through a phishing campaign to include a malware. It contains an install script that executes a bundled DLL file via rundll32 on Windows systems, allowing arbitrary code execution. The script also manipulates files and directories, including deleting, archivin...

MSC-2025-6739

This package version was compromised through a phishing campaign to include a malware. It contains an install script that executes a bundled DLL file via rundll32 on Windows systems, allowing arbitrary code execution. The script also manipulates files and directories, including deleting, archivin...

CVE-2024-36333

A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-36333

CVE-2024-36333 is a DLL hijacking vulnerability in the AMD Cleanup Utility that could enable privilege escalation with potential arbitrary code execution. Affected: AMD Cleanup Utility. Root cause: DLL search order hijack leading to code execution with high impact on confidentiality/integrity/ava...

CVE-2024-36333

A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

EUVD-2024-55590

A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-36333: Uncontrolled Search Path Element

A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2025-62628

Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arbitrary code execution...

CVE-2025-62628

The CVE-2025-62628 issue is tied to unsafe OpenSSL initialization in AMD Manageability Software / AMD optional tools . The root cause is initialization that allows a local, privileged attacker to inject a malicious DLL , potentially leading to arbitrary code execution . Documentation consistently...

CVE-2025-62628

Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arbitrary code execution...

CVE-2025-62628

Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arbitrary code execution...

CVE-2025-62628

Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arbitrary code execution...

AMD AIM-T Manageability Service code-related vulnerabilities

AMD AIM-T Manageability Service is an industrial-grade remote device management service provided by American semiconductor company AMD. It supports operations and maintenance of edge computing nodes. There are code vulnerabilities in AMD AIM-T Manageability Service. These vulnerabilities stem fro...