MAL-2025-22912 Malicious code in ichnology-helios-grus-vuetify (npm)

The package ichnology-helios-grus-vuetify was found to contain malicious code...

MAL-2025-22359 Malicious code in helios-joviology-changelog-less-loader (npm)

The package helios-joviology-changelog-less-loader was found to contain malicious code...

MAL-2025-22358 Malicious code in helios-coronalmassejection-carina-crust (npm)

The package helios-coronalmassejection-carina-crust was found to contain malicious code...

MAL-2025-15621 Malicious code in betelgeuse-sirius-helios-elara (npm)

The package betelgeuse-sirius-helios-elara was found to contain malicious code...

MAL-2025-14404 Malicious code in altair-helios-start-sass-loader (npm)

The package altair-helios-start-sass-loader was found to contain malicious code...

MAL-2025-26576 Malicious code in mocha-helios-postgres-registry (npm)

The package mocha-helios-postgres-registry was found to contain malicious code...

MAL-2025-21904 Malicious code in gravity-quasar-helios-betelgeuse (npm)

The package gravity-quasar-helios-betelgeuse was found to contain malicious code...

MAL-2025-22360 Malicious code in helios-ultra-rollup-plugin-gridsome (npm)

The package helios-ultra-rollup-plugin-gridsome was found to contain malicious code...

CVE-2020-5782

In IgniteNet HeliOS GLinq v2.2.1 r2961, if a user logs in and sets the ‘wantype’ parameter, the wan interface for the device will become unreachable, which results in a denial of service condition for devices dependent on this connection...

CVE-2020-5781

In IgniteNet HeliOS GLinq v2.2.1 r2961, the langSelection parameter is stored in the luci configuration file /etc/config/luci by the authenticator.htmlauth function. When modified with arbitrary javascript, this causes a denial-of-service condition for all other users...

CVE-2020-5783

In IgniteNet HeliOS GLinq v2.2.1 r2961, the login functionality does not contain any CSRF protection mechanisms...

Malware in @johndeere-tech/helios-styles

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @johndeere-tech/helios-ng-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @johndeere-tech/helios-mat-styles

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3673 Malicious code in @johndeere-tech/helios-ng-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cafd54c91f17226053b5247b4cd518c79cc4e6462f2bf35455fc9a9f8b55c42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @johndeere-tech/helios-mat-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 226a36baff3a45f171643849384a2b5ba6f9120f2a98d58b2589fc9381fc1c8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @johndeere-tech/helios-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99b3379997f7c1fa963e3f0022064669ccae41425799fd8d62cbcda0d2d01651 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

helios-treppenlifte.de Improper Access Control vulnerability OBB-3773567

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

helios-servis.cz Cross Site Scripting vulnerability OBB-3257513

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2022-562 Malicious code in @riptano/helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ce78b47ef6b3e95b29924aee3edd4bce0a8c9519a79493905ebcb7796553afc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...