35 matches found
CVE-2026-75053
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint...
EUVD-2026-60252
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint...
CVE-2026-75053
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint...
CVE-2026-75053
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint...
CVE-2026-75053
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint...
CVE-2026-75053
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint...
PT-2026-76702
In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint...
MAL-2026-10531 Malicious code in chain-devkit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabf751a767ad631ac38651254930d99c8ccb0feab8dc5c96b5d3ab243796ddc The postinstall script fetches YAML from https://chain-devkit.com/config with no version pin, hash, or signature check, then parses it with js-yaml...
MAL-2026-6814 Malicious code in devkit-scripts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 581ed217608ccad453288981a19091bbc57aac7b6dda9aa2b682485cc68c5008 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-49197 Malicious code in epic-tools-devkit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62dc9a7298e774713ed543ce37d55dbfbbd742daf3bbba377b9c9de861b3a4e4 The package epic-tools-devkit was found to contain malicious code...
EUVD-2025-37096
Malicious code in epic-tools-devkit npm...
Malicious code in epic-tools-devkit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62dc9a7298e774713ed543ce37d55dbfbbd742daf3bbba377b9c9de861b3a4e4 The package epic-tools-devkit was found to contain malicious code...
CVE-2025-10894 Nx: nx/devkit: malicious versions of nx and plugins published to npm
Malicious code was inserted into the Nx build system package and several related plugins. The tampered package was published to the npm software registry, via a supply-chain attack. Affected versions contain code that scans the file system, collects credentials, and posts them to GitHub as a repo...
CVE-2025-10894
CVE-2025-10894 describes malicious versions of the Nx build system and related plugins published on the npm registry via a supply-chain attack. Affected packages contain code that scans the filesystem, collects credentials, and posts them to GitHub under the user’s account. The CVSSv3.1 base scor...
MAL-2025-41436 Malicious code in @nx/devkit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b11cb4be7497510402676b2b593e6a5d3e0dee4e1443996403e8aa496f284f3 Summary Malicious versions of the nx package, as well as some supporting plugin packages, were published to npm, containing code that scans the file...
Malicious code in @nx/devkit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b11cb4be7497510402676b2b593e6a5d3e0dee4e1443996403e8aa496f284f3 Summary Malicious versions of the nx package, as well as some supporting plugin packages, were published to npm, containing code that scans the file...
Embeded Malicious Code
Overview @nx/devkit is an AI-first build platform that connects everything from your editor to CI. Helping you deliver fast, without breaking things. This package contains a set of utilities for creating Nx plugins. Affected versions of this package are vulnerable to Embeded Malicious Code throug...
MAL-2025-6901 Malicious code in @angular_devkit/build_angular (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...