TinyEnv 安全漏洞

TinyEnv is an environment variable loader for Dat Duy Personal Developer. A security vulnerability exists in TinyEnv versions 1.0.1, 1.0.2, 1.0.9, and 1.0.10, which stems from a checking deficiency in the .env file that could lead to unsafe default configurations...

CVE-2025-32321

In isSafeIntent of AccountTypePreferenceLoader.java, there is a possible way to bypass an intent type check due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-9365

Fuji Electric FRENIC-Loader 4 is vulnerable to a deserialization of untrusted data when importing a file through a specified window, which may allow an attacker to execute arbitrary code...

Malicious code in janus-react-bootstrap-less-loader-biomimicry (npm)

The package janus-react-bootstrap-less-loader-biomimicry was found to contain malicious code...

MAL-2025-44756 Malicious code in janus-react-bootstrap-less-loader-biomimicry (npm)

The package janus-react-bootstrap-less-loader-biomimicry was found to contain malicious code...

MAL-2025-44142 Malicious code in epimetheus-html-webpack-plugin-markdown-style-loader (npm)

The package epimetheus-html-webpack-plugin-markdown-style-loader was found to contain malicious code...

MAL-2025-43915 Malicious code in csv-readable-exosphere-style-loader (npm)

The package csv-readable-exosphere-style-loader was found to contain malicious code...

Malicious code in phylogenetics-adonis-postcss-loader-frontend (npm)

The package phylogenetics-adonis-postcss-loader-frontend was found to contain malicious code...

MAL-2025-44601 Malicious code in hercules-grus-css-loader-package (npm)

The package hercules-grus-css-loader-package was found to contain malicious code...

MAL-2025-43416 Malicious code in aether-venus-lacerta-less-loader (npm)

The package aether-venus-lacerta-less-loader was found to contain malicious code...

MAL-2025-43960 Malicious code in deneb-socketio-sass-loader-rollup-plugin (npm)

The package deneb-socketio-sass-loader-rollup-plugin was found to contain malicious code...

Malicious code in archaeometry-hercules-singularitarianism-style-loader (npm)

The package archaeometry-hercules-singularitarianism-style-loader was found to contain malicious code...

Malicious code in epimetheus-html-webpack-plugin-markdown-style-loader (npm)

The package epimetheus-html-webpack-plugin-markdown-style-loader was found to contain malicious code...

Malicious code in futurology-postcss-loader-vulcan-genomics (npm)

The package futurology-postcss-loader-vulcan-genomics was found to contain malicious code...

Malicious code in hercules-grus-css-loader-package (npm)

The package hercules-grus-css-loader-package was found to contain malicious code...

Malicious code in less-loader-quasar-spectroscopy-astrobiology (npm)

The package less-loader-quasar-spectroscopy-astrobiology was found to contain malicious code...

Malicious code in nestjs-uranology-weywot-css-loader (npm)

The package nestjs-uranology-weywot-css-loader was found to contain malicious code...

Malicious code in pipe-less-loader-fornax-regulus (npm)

The package pipe-less-loader-fornax-regulus was found to contain malicious code...

Malicious code in style-loader-troposphere-speleology-link (npm)

The package style-loader-troposphere-speleology-link was found to contain malicious code...

Malicious code in webdriver-manager-plutology-postcss-loader-meissa (npm)

The package webdriver-manager-plutology-postcss-loader-meissa was found to contain malicious code...