64 matches found
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Malicious code in hello-world-target (npm)
The package hello-world-target was found to contain malicious code...
MAL-2025-22367 Malicious code in hello-world-target (npm)
The package hello-world-target was found to contain malicious code...
MAL-2025-22365 Malicious code in hello-world-from-lupin-99 (npm)
The package hello-world-from-lupin-99 was found to contain malicious code...
MAL-2025-22366 Malicious code in hello-world-lupin (npm)
The package hello-world-lupin was found to contain malicious code...
Malicious code in hello-world-from-lupin-99 (npm)
The package hello-world-from-lupin-99 was found to contain malicious code...
MAL-2025-28370 Malicious code in optimystic-hello-world (npm)
The package optimystic-hello-world was found to contain malicious code...
Malicious code in hello-world-lupin (npm)
The package hello-world-lupin was found to contain malicious code...
Malicious code in hello-world-from-lupin-95 (npm)
The package hello-world-from-lupin-95 was found to contain malicious code...
Malicious code in optimystic-hello-world (npm)
The package optimystic-hello-world was found to contain malicious code...
MAL-2025-22364 Malicious code in hello-world-from-lupin-95 (npm)
The package hello-world-from-lupin-95 was found to contain malicious code...
CVE-2024-9224
The Hello World plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 2.1.1 via the helloworldlyric function. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the...
Malicious code in gatsby-starter-hello-world (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6c7747634dd4e3ce4eb97de472957ba6fd913f4eff5887068d5d266c4957908 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-7WRW-R4P8-38RX vulnerabilities
Vulnerabilities for packages: ctop, kubernetes-release, flux, opa-envoy, docker-compose, fscrypt, oras, spiffe-helper, git-lfs, kserve-rest-proxy, gitsign, kubernetes-dashboard-api, postgres-operator, nuclei, newrelic-fluent-bit-output, shfmt, tfsec, nri-prometheus, kubecolor, glow,...
Malicious code in pulumi-eks-hello-world (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-863 Malicious code in pulumi-eks-hello-world (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11465 Malicious code in take4-hello-world (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in take4-hello-world (npm)
--- -= Per source details. Do not edit below this line.=-...