379 matches found
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
@crowdstrike/ember-oss-docs (>=1.0.1 <=1.1.8) potentially affected by unknown CVE via ember-url-hash-polyfill (=1.0.11)
ember-url-hash-polyfill NPM version =1.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on ember-url-hash-polyfill and may be impacted: - @crowdstrike/ember-oss-docs =1.0.1, =1.1.8 Source cves: unknown CVE Source advisory:...
@crowdstrike/ember-toucan-core (>=0.3.0 <=0.4.6), @frontile/buttons (=0.18.0-alpha.5) +13 more potentially affected by unknown CVE via ember-velcro (=2.2.0)
ember-velcro NPM version =2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ember-velcro and may be impacted: - @crowdstrike/ember-toucan-core =0.3.0, =0.17.0-alpha.0, =0.17.0, =0.17.0, =0.17.0, =9.4.0, =8.3.0, =0.1.0, =0.0.4, =0.17.0, =0.0.4, =0.0...
GHSA-RRW2-PX9J-QFFJ FS2 half-shutdown of socket during TLS handshake may result in spin loop on opposite side
Impact When establishing a TLS session using fs2-io on the JVM using the fs2.io.net.tls package, if one side of the connection shuts down write while the peer side is awaiting more data to progress the TLS handshake, the peer side will spin loop on the socket read, fully utilizing a CPU. This CPU...
FS2 half-shutdown of socket during TLS handshake may result in spin loop on opposite side
Impact When establishing a TLS session using fs2-io on the JVM using the fs2.io.net.tls package, if one side of the connection shuts down write while the peer side is awaiting more data to progress the TLS handshake, the peer side will spin loop on the socket read, fully utilizing a CPU. This CPU...
Malicious code in @ember-velcro/monorepo-root (npm)
The package @ember-velcro/monorepo-root was found to contain malicious code...
MAL-2025-42485 Malicious code in @ember-velcro/monorepo-root (npm)
The package @ember-velcro/monorepo-root was found to contain malicious code...
PT-2025-36633
Impact When establishing a TLS session using fs2-io on the JVM using the fs2.io.net.tls package, if one side of the connection shuts down write while the peer side is awaiting more data to progress the TLS handshake, the peer side will spin loop on the socket read, fully utilizing a CPU. This CPU...
Malicious code in ember-lts-4.4 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6925 Malicious code in ember-lts-4.4 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in ember-normalize-url-shim (npm)
The package ember-normalize-url-shim was found to contain malicious code...
Malicious code in ember-i87hx-31r2h-keystone-project (npm)
The package ember-i87hx-31r2h-keystone-project was found to contain malicious code...
Malicious code in ember-cli-bable (npm)
The package ember-cli-bable was found to contain malicious code...
Malicious code in @zalastax/nolb-ember-r (npm)
The package @zalastax/nolb-ember-r was found to contain malicious code...
Malicious code in ember-tm7wc-1sinr-celestial-project (npm)
The package ember-tm7wc-1sinr-celestial-project was found to contain malicious code...
Malicious code in verdant-68m3y-lodj1-ember-project (npm)
The package verdant-68m3y-lodj1-ember-project was found to contain malicious code...
Malicious code in quicksilver-lsmzm-hmnfc-ember-project (npm)
The package quicksilver-lsmzm-hmnfc-ember-project was found to contain malicious code...