3227 matches found
Malicious code in api-extractor-lib5-test (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41364 Malicious code in api-extractor-lib5-test (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in package-extractor-test-03 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f546d25f789caac055c54a1973c81e1df6ce7b9aa1f11b33f42f8a3612a7652d The OpenSSF Package Analysis project identified...
MAL-2025-41316 Malicious code in package-extractor-test-03 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f546d25f789caac055c54a1973c81e1df6ce7b9aa1f11b33f42f8a3612a7652d The OpenSSF Package Analysis project identified...
Malicious code in package-extractor-test-02 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 697a859ea4113bd747e08d7e374aff232885ac108926a2f0b8be99612d3e67d0 The OpenSSF Package Analysis project identified...
MAL-2025-41315 Malicious code in package-extractor-test-02 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 697a859ea4113bd747e08d7e374aff232885ac108926a2f0b8be99612d3e67d0 The OpenSSF Package Analysis project identified...
Malicious code in api-extractor-lib4-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 659516491da5eda94919af0b09a941720c55632d3a7c3ced84c056da49b4e504 The OpenSSF Package Analysis project identified 'api-extractor-lib4-test' @ 99.0.9 npm as malicious. It is considered malicious because: - The...
MAL-2025-41280 Malicious code in api-extractor-lib4-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 659516491da5eda94919af0b09a941720c55632d3a7c3ced84c056da49b4e504 The OpenSSF Package Analysis project identified 'api-extractor-lib4-test' @ 99.0.9 npm as malicious. It is considered malicious because: - The...
Linux Distros Unpatched Vulnerability : CVE-2022-24613
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash...
Malicious code in k8s-image-extractor (npm)
The package k8s-image-extractor was found to contain malicious code...
MAL-2025-24148 Malicious code in k8s-image-extractor (npm)
The package k8s-image-extractor was found to contain malicious code...
MAL-2025-34097 Malicious code in string-template-extractor (npm)
The package string-template-extractor was found to contain malicious code...
Malicious code in string-template-extractor (npm)
The package string-template-extractor was found to contain malicious code...
curl: Account/Repository Takeover via Abandoned GitHub Username in curl's href_extractor.c
Summary: The hrefextractor.c example in the curl repository https://github.com/curl/curl/blob/master/docs/examples/hrefextractor.c references an external HTML parser library hosted at https://github.com/arjunc77/htmlstreamparser. The referenced GitHub username arjunc77 or repository...
Malware in plugin-meta-extractor
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
candid-extractor (>=0.1.0, <=0.1.2), deterministic-wasi-ctx (0.1.14) +17 more potentially affected by CVE-2025-53901 via wasmtime (>=10.0.2, <=12.0.2)
wasmtime CARGO version =10.0.2, =0.1.0, =0.5.0, =0.5.0, =0.1.0, =0.1.0, =10.0.0, =10.0.0, =0.1.0, =0.1.2, =0.3.0, =10.0.0, =1.7.0, =1.8.0 and more Source cves: CVE-2025-53901 Source advisory: GHSA-FM79-3F68-H2FC...
Malicious code in plugin-meta-extractor (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8afae718387e4b2dfc69c8abec1fa53bf680355cc9e412cbeedfa77c47ac2f6b Any computer that has this package installed or running should be considered...
MAL-2025-5625 Malicious code in plugin-meta-extractor (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8afae718387e4b2dfc69c8abec1fa53bf680355cc9e412cbeedfa77c47ac2f6b Any computer that has this package installed or running should be considered...
PhishKey: a Novel Centroid-Based Approach for Enhanced Phishing Detection Using Adaptive HTML Component Extraction
Phishing attacks pose a significant cybersecurity threat, evolving rapidly to bypass detection mechanisms and exploit human vulnerabilities. This paper introduces PhishKey to address the challenges of adaptability, robustness, and efficiency. PhishKey is a novel phishing detection method using...
An Efficient Construction of Raz's Two-Source Randomness Extractor with Improved Parameters
Randomness extractors are algorithms that distill weak random sources into near-perfect random numbers. Two-source extractors enable this distillation process by combining two independent weak random sources. Raz's extractor STOC '05 was the first to achieve this in a setting where one source has...