8174 matches found
MAL-2025-191154 Malicious code in webpack-loader-httpfile (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac614016dd648eebd83cab4f9c04585d52439a98b69d5e02694cb48119dfd96 The package webpack-loader-httpfile was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199194
Malicious code in webpack-loader-httpfile npm...
MAL-2025-190993 Malicious code in react-linear-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccf5203f35299ba1826e76daefdfa5e28ce387072c612234ee91afa242ba8df5 The package react-linear-loader was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199050
Malicious code in react-linear-loader npm...
Malicious code in react-linear-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccf5203f35299ba1826e76daefdfa5e28ce387072c612234ee91afa242ba8df5 The package react-linear-loader was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198722
Malicious code in @ensdomains/vite-plugin-i18next-loader npm...
Malicious code in @ensdomains/vite-plugin-i18next-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473280de7d29dd017bfa50f0826a0aa810d204a6949fe49d6753ff28ff61d505 The package @ensdomains/vite-plugin-i18next-loader was found to contain malicious code. Source: ghsa-malware...
CVE-2025-12739 Cross-Site Scripting (XSS) in Looker's Extension Loader leading to Admin Account Compromise
An attacker with viewer permissions in Looker could craft a malicious URL that, when opened by a Looker admin, would execute an attacker-supplied script. Exploitation required at least one Looker extension installed on the instance. Looker-hosted and Self-hosted were found to be vulnerable. This...
CVE-2025-12739
CVE-2025-12739 involves a Cross-Site Scripting (XSS) vulnerability in Looker’s Extension Loader. An attacker with viewer permissions can craft a malicious URL that, when opened by a Looker administrator, could run attacker-supplied script. Exploitation requires at least one Looker extension insta...
CVE-2025-12739 Cross-Site Scripting (XSS) in Looker's Extension Loader leading to Admin Account Compromise
An attacker with viewer permissions in Looker could craft a malicious URL that, when opened by a Looker admin, would execute an attacker-supplied script. Exploitation required at least one Looker extension installed on the instance. Looker-hosted and Self-hosted were found to be vulnerable. This...
Tsundere Botnet Expands Using Game Lures and Ethereum-Based C2 on Windows
Cybersecurity researchers have warned of an actively expanding botnet dubbed Tsundere that's targeting Windows users. Active since mid-2025, the threat is designed to execute arbitrary JavaScript code retrieved from a command-and-control C2 server, Kaspersky researcher Lisandro Ubiedo said in an...
GNU GRUB security vulnerability
GNU GRUB is a Linux system boot program from the GNU community. A security vulnerability exists in GNU GRUB that originates from incorrectly retaining memory pointers during file closure, which could lead to a denial of service...
Dragon Breath Uses RONINGLOADER to Disable Security Tools and Deploy Gh0st RAT
The threat actor known as Dragon Breath has been observed making use of a multi-stage loader codenamed RONINGLOADER to deliver a modified variant of a remote access trojan called Gh0st RAT. The campaign, which is primarily aimed at Chinese-speaking users, employs trojanized NSIS installers...
EUVD-2025-179677
Malicious code in colors-nightwatch-antimatter-postcss-loader npm...
EUVD-2025-178125
Malicious code in less-loader-react-bootstrap-cosmicray-spectroscopy npm...
EUVD-2025-179302
Malicious code in development-postcss-loader-webpack-cosmicweb npm...
EUVD-2025-177844
Malicious code in middleware-css-loader-eigenstate-pavo npm...
EUVD-2025-179450
Malicious code in csv-mongodb-rehype-less-loader npm...