5759 matches found
Malicious code in eslint-js-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6662e6d5b878c4eb877089ca5baf3bd40947a9e14dc394e9f11e935facea5b5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48291 Malicious code in eslint-js-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6662e6d5b878c4eb877089ca5baf3bd40947a9e14dc394e9f11e935facea5b5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview eslint-js-config is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
WordPress WP Mapbox GL JS Maps plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin WP Mapbox GL JS Maps versions = 3.0.1...
RockyLinux 9 : firefox (RLSA-2025:16108)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:16108 advisory. firefox: thunderbird: Sandbox escape due to use-after-free in the Graphics: Canvas2D component CVE-2025-10527 firefox: thunderbird: Incorrect boundary...
PT-2025-41599
Name of the Vulnerable Software and Affected Versions Happy DOM versions 19 and lower Description Happy DOM, a JavaScript implementation of a web browser without a graphical user interface, contains a security issue that could lead to Remote Code Execution RCE attacks. The Node.js VM Context with...
Malicious Package
Overview js-notifiers is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in js-notifiers (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 516c8c2eb1e3c158b2e0c618c03ccee9b71d7aebe439a4ddbe2900a8fc518c7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-33625
Malicious code in js-notifiers npm...
MAL-2025-48243 Malicious code in js-notifiers (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 516c8c2eb1e3c158b2e0c618c03ccee9b71d7aebe439a4ddbe2900a8fc518c7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
OSV-2025-824 Use-of-uninitialized-value in JS_DefineProperty
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=449772271 Crash type: Use-of-uninitialized-value Crash state: JSDefineProperty buildbacktrace JSCallInternal...
EUVD-2014-1237
Malware in sbrugna...
EUVD-2020-17609
Malware in sbrugna...
EUVD-2010-2233
Malware in sbrugna...
EUVD-2019-7878
Malware in sbrugna...
EUVD-2017-11468
Malware in sbrugna...
EUVD-2018-13526
Malware in sbrugna...
EUVD-2017-0154
Malware in sbrugna...