MAL-2025-20973 Malicious code in frontend-redis-orogeny-karma (npm)

The package frontend-redis-orogeny-karma was found to contain malicious code...

MAL-2025-24326 Malicious code in karma-puida-4cu7u-quiver-project (npm)

The package karma-puida-4cu7u-quiver-project was found to contain malicious code...

MAL-2025-20422 Malicious code in fetch-typeorm-karma-technocracy (npm)

The package fetch-typeorm-karma-technocracy was found to contain malicious code...

MAL-2025-17622 Malicious code in cosmogenic-karma-wormhole-wasat (npm)

The package cosmogenic-karma-wormhole-wasat was found to contain malicious code...

MAL-2025-21335 Malicious code in geochemistry-seismology-higgs-karma (npm)

The package geochemistry-seismology-higgs-karma was found to contain malicious code...

MAL-2025-13983 Malicious code in accretion-foundation-karma-paleoceanography (npm)

The package accretion-foundation-karma-paleoceanography was found to contain malicious code...

MAL-2025-24325 Malicious code in karma-middleware (npm)

The package karma-middleware was found to contain malicious code...

MAL-2025-29698 Malicious code in procyon-gemini-karma-playwright (npm)

The package procyon-gemini-karma-playwright was found to contain malicious code...

MAL-2025-24327 Malicious code in karma-repository-request-helmet (npm)

The package karma-repository-request-helmet was found to contain malicious code...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.1, container-object-storage-interface-fips, yam, nri-memcached, dragonfly-operator, wave-fips, vault-env, rke2-cloud-provider, promxy-fips, azure-aad-pod-identity-mic, ytt, temporal-ui-server-fips, local-path-provisioner-fips, blob-csi,...

Malicious code in karma-jasmine-sinon (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6532 Malicious code in karma-jasmine-sinon (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4840 Malicious code in karma-spec-filter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3503f8ac76bf4e0ba36fc7cbaab721a6285fe53ff821cd82ca0f4e417308eb49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in karma-spec-filter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3503f8ac76bf4e0ba36fc7cbaab721a6285fe53ff821cd82ca0f4e417308eb49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-37602

Prototype pollution vulnerability in karma-runner grunt-karma 4.0.1 via the key variable in grunt-karma.js...

CVE-2011-4090

Serendipity before 1.6 has an XSS issue in the karma plugin which may allow privilege escalation...

MAL-2025-130 Malicious code in karma-fest-preprocessor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12fc59d44987dfafc3d0226a2629d1aa8294664f22936a59406d8e77b6695b2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in karma-fest-preprocessor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12fc59d44987dfafc3d0226a2629d1aa8294664f22936a59406d8e77b6695b2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-42618

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /module.php?module=karma...

PT-2024-30069 · Pligg Cms · Pligg Cms

Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was discovered, affecting the software through the "module.php?module=karma" endpoint. This allows for malicious requests to be made on behalf of the user...