297 matches found
Drupal CivicTheme Design System module < 1.12.0 - Unauthenticated Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS vulnerability discovered by Adam Bramley acbramley in WordPress Module CivicTheme Design System versions 1.12.0...
EUVD-2024-42784
Malicious code in bioql PyPI...
EUVD-2025-30115
Malicious code in bioql PyPI...
MAL-2025-47578 Malicious code in altoqitec-design-system-react (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in altoqitec-design-system-react (npm)
The package communicates with a domain associated with malicious activity...
Malware in @yoobic/design-system
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-47291 Malicious code in @yoobic/design-system (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3dc662cb25b7ebe3c1d58e79387906ea93fed4e7034c6e415b1befd1971874a Any computer that has this package installed or running should be considered fully compromised. All...
Malicious code in @yoobic/design-system (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3dc662cb25b7ebe3c1d58e79387906ea93fed4e7034c6e415b1befd1971874a Any computer that has this package installed or running should be considered fully compromised. All...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
Malicious code in design-system-components-angular-workspace (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41967 Malicious code in design-system-components-angular-workspace (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in bps-react-design-system (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41372 Malicious code in bps-react-design-system (npm)
The package communicates with a domain associated with malicious activity...
Security Bulletin: Carbon design system packages
Summary Various packages are vulnerable to multiples CVEs and can be resolved by updating to [email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected]....
Malicious code in yarn-design-system-icons-ce-c (npm)
The package yarn-design-system-icons-ce-c was found to contain malicious code...
MAL-2025-40339 Malicious code in yarn-design-system-icons-ce-c (npm)
The package yarn-design-system-icons-ce-c was found to contain malicious code...
MAL-2025-40342 Malicious code in yarn-design-system-react-components (npm)
The package yarn-design-system-react-components was found to contain malicious code...
MAL-2025-40343 Malicious code in yarn-design-system-react-components-ce-c (npm)
The package yarn-design-system-react-components-ce-c was found to contain malicious code...