Malicious code in xanthus-grunt-foundation-hyperion (npm)

The package xanthus-grunt-foundation-hyperion was found to contain malicious code...

Malicious code in plutology-quantum-computing-link-foundation (npm)

The package plutology-quantum-computing-link-foundation was found to contain malicious code...

Malicious code in cache-io-foundation-gammarayburst (npm)

The package cache-io-foundation-gammarayburst was found to contain malicious code...

Malicious code in omnia-foundation (npm)

The package omnia-foundation was found to contain malicious code...

Malicious code in redis-cosmogenic-foundation-xanthus (npm)

The package redis-cosmogenic-foundation-xanthus was found to contain malicious code...

MAL-2025-27336 Malicious code in neutrino-foundation-bellatrix-barnard (npm)

The package neutrino-foundation-bellatrix-barnard was found to contain malicious code...

MAL-2025-13983 Malicious code in accretion-foundation-karma-paleoceanography (npm)

The package accretion-foundation-karma-paleoceanography was found to contain malicious code...

PT-2025-32984

Name of the Vulnerable Software and Affected Versions AMPHP affected versions not specified Apache Tomcat affected versions not specified Eclipse Foundation affected versions not specified F5 affected versions not specified Fastly affected versions not specified gRPC affected versions not specifi...

“The worst thing” for online rights: An age-restricted grey web (Lock and Code S06E16)

This week on the Lock and Code podcast … The internet is cracking apart. It’s exactly what some politicians want. In June, a Texas law that requires age verification on certain websites withstood a legal challenge brought all the way to the US Supreme Court. It could be a blueprint for how the...

MAL-2025-6821 Malicious code in @tradair-repo/sources-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4c2e8efcfd67964d523b508359644439a1c57011cf171ba350241c6949654fe4 The OpenSSF Package Analysis project identified '@tradair-repo/sources-react' @ 1.0.0-malicious npm as malicious. It is considered malicious...

MAL-2025-6820 Malicious code in securitycontext-model-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d0f5dc5cd2ec64246a68ae3d6a8a63b03e25442841125c4fcaf8601002d97bb2 The OpenSSF Package Analysis project identified 'securitycontext-model-paypal' @ 2.2.22 npm as malicious. It is considered malicious because: -...

OpenHarmony 竞争条件问题漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom OpenAtom Foundation. A competitive condition issue vulnerability exists in OpenHarmony v5.0.3 and earlier versions, which stems from a competitive condition in tcb that could lead to the execution of arbitrar...

OpenHarmony 安全漏洞

OpenHarmony is an open source project of a kind of Hongmeng operating system from the China OpenAtom OpenAtom Foundation. A security vulnerability exists in OpenHarmony v5.0.3 and earlier versions, which stems from type obfuscation and could lead to a denial of service...

CVE-2025-55134

In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via tag in client/agora/public/js/editorManager.js...

CVE-2025-55135

In Agora Foundation Agora fall23-Alpha1 before 690ce56, there is XSS via a profile picture to server/controller/userController.js. Formats other than PNG, JPEG, and WEBP are permitted by server/routes/userRoutes.js; this includes SVG...

CVE-2025-55134

In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via tag in client/agora/public/js/editorManager.js...

CVE-2025-55133

In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via topicName in client/agora/public/js/editorManager.js...

Malicious code in sendbird-notifications-extension-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis db0ee25cfff1ec99d94cc0e5866df17eda725c53a92c98ce3057df8f5f23c9cc The OpenSSF Package Analysis project identified 'sendbird-notifications-extension-example' @ 1019.0.1 npm as malicious. It is considered malicio...

PT-2025-32267 · Agora · Agora Foundation

Name of the Vulnerable Software and Affected Versions: Agora Foundation Agora versions prior to b087490 Description: The application is susceptible to a cross-site scripting XSS issue due to improper handling of the topicName parameter within the client/agora/public/js/editorManager.js file...

CVE-2025-55135

In Agora Foundation Agora fall23-Alpha1 before 690ce56, there is XSS via a profile picture to server/controller/userController.js. Formats other than PNG, JPEG, and WEBP are permitted by server/routes/userRoutes.js; this includes SVG...