PT-2025-33488 · Autodesk · Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can lead to a memory corruption issue. A malicious actor can potentially leverage this issue to execu...

PT-2025-33487 · Autodesk · Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted DGN file, when parsed through Autodesk AutoCAD, can trigger an uninitialized variable issue. A malicious actor can leverage this to cause a crash, read...

PT-2025-33486 · Autodesk · Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can trigger an Out-of-Bounds Read issue. A malicious actor can exploit this to cause a crash, read...

Malicious code in design-guide (npm)

The package design-guide was found to contain malicious code...

Malicious code in yarn-design-system-react-components (npm)

The package yarn-design-system-react-components was found to contain malicious code...

@naologic/design (>=1.0.5, <=1.1.4) potentially affected by unknown CVE via iodash (0.0.1-security)

iodash NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on iodash and may be impacted: - @naologic/design =1.0.5, =1.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23307...

Malicious code in @sellerly-kit/design-tokens (npm)

The package @sellerly-kit/design-tokens was found to contain malicious code...

Malicious code in vue-design-system (npm)

The package vue-design-system was found to contain malicious code...

Malicious code in yarn-design-system-ag-grid (npm)

The package yarn-design-system-ag-grid was found to contain malicious code...

Malicious code in lynx-elara-antd-nodejs (npm)

The package lynx-elara-antd-nodejs was found to contain malicious code...

Malicious code in @healthbyro/design-tokens (npm)

The package @healthbyro/design-tokens was found to contain malicious code...

Malicious code in yelp-schema-design (npm)

The package yelp-schema-design was found to contain malicious code...

Malicious code in yarn-design-system-icons-ce-c (npm)

The package yarn-design-system-icons-ce-c was found to contain malicious code...

Malicious code in yarn-design-system-rc-slider (npm)

The package yarn-design-system-rc-slider was found to contain malicious code...

MAL-2025-40343 Malicious code in yarn-design-system-react-components-ce-c (npm)

The package yarn-design-system-react-components-ce-c was found to contain malicious code...

MAL-2025-40339 Malicious code in yarn-design-system-icons-ce-c (npm)

The package yarn-design-system-icons-ce-c was found to contain malicious code...

MAL-2025-40342 Malicious code in yarn-design-system-react-components (npm)

The package yarn-design-system-react-components was found to contain malicious code...

MAL-2025-15990 Malicious code in bootstrap-material-design-datepicker (npm)

The package bootstrap-material-design-datepicker was found to contain malicious code...

Malicious code in procyon-dagda-hawkingradiation-antd (npm)

The package procyon-dagda-hawkingradiation-antd was found to contain malicious code...

Malicious code in yarn-design-system-react-components-ce-c (npm)

The package yarn-design-system-react-components-ce-c was found to contain malicious code...