183 matches found
Malicious code in transform-vue-jsx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e223730f37f6e4ebbb935ce737076e8e48e23db4fb9f8d280cc9f93a6cf2193 The package transform-vue-jsx was found to contain malicious code. Source: ghsa-malware...
CVE-2026-24771
Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.11.7, a Cross-Site Scripting XSS vulnerability exists in the ErrorBoundary component of the hono/jsx library. Under certain usage patterns, untrusted user-controlled strings may be rendered as...
CVE-2026-24771 Hono has a Cross-site Scripting vulnerability
Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.11.7, a Cross-Site Scripting XSS vulnerability exists in the ErrorBoundary component of the hono/jsx library. Under certain usage patterns, untrusted user-controlled strings may be rendered as...
EUVD-2025-204427
A Server-Side Template Injection SSTI vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15 allows remote attackers to execute arbitrary code via inline JSX expressions in an MDX file...
VulnCheck KEV: CVE-2025-55748
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 4.2-milestone-2 through 16.10.6, configuration files are accessible through jsx and sx endpoints. It's possible to access and read configuration files by using URLs such as...
Malicious Package
Overview transform-react-jsx-source is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious code in transform-react-jsx-source (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd1c3c75a248290b6685831711ef1fa1ec32244ea7ab218a36c42a6b5163e560 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-36746
Malicious code in transform-react-jsx-source npm...
MAL-2025-49050 Malicious code in transform-react-jsx-source (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd1c3c75a248290b6685831711ef1fa1ec32244ea7ab218a36c42a6b5163e560 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-36858
Malicious code in jsx-a11y npm...
Malicious code in jsx-a11y (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69d8158b553a773a363a5a4bbce1477f430fae7a45c29fe8f1855401337f4b0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-49016 Malicious code in jsx-a11y (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69d8158b553a773a363a5a4bbce1477f430fae7a45c29fe8f1855401337f4b0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview jsx-a11y is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
EUVD-2021-2445
Malware in sbrugna...
EUVD-2022-1741
Malicious code in bioql PyPI...
EUVD-2022-0618
Malicious code in bioql PyPI...
EUVD-2025-5079
Malicious code in bioql PyPI...
EUVD-2024-2940
Malicious code in bioql PyPI...
EUVD-2025-26643
Malicious code in bioql PyPI...
CVE-2025-55748
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 4.2-milestone-2 through 16.10.6, configuration files are accessible through jsx and sx endpoints. It's possible to access and read configuration files by using URLs such as...