1705 matches found
EUVD-2023-12775
Malicious code in bioql PyPI...
EUVD-2022-34208
Malicious code in bioql PyPI...
MAL-2025-47822 Malicious code in phoenix-analytics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94bc35faad75f63d0ebbb6a00e345d0bcb96e35e820f9129640db9dba220627c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in phoenix-analytics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94bc35faad75f63d0ebbb6a00e345d0bcb96e35e820f9129640db9dba220627c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47823 Malicious code in phoenix-platform (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69b500d89836dd1a319cc80d28b1c005dc428afe1520fea95cd3f82b8109bc87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in phoenix-platform (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69b500d89836dd1a319cc80d28b1c005dc428afe1520fea95cd3f82b8109bc87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47824 Malicious code in phoenix-privacy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdec9e2a1102dc27688b95b7b25b6609f0805e7ae034f4d3fc1ae47dfe9c8baf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in phoenix-privacy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdec9e2a1102dc27688b95b7b25b6609f0805e7ae034f4d3fc1ae47dfe9c8baf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in phoenix-upper-funnel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63faa5490a7a15613381071d036657935856797ccd344b5cbc23f00075462078 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47825 Malicious code in phoenix-upper-funnel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63faa5490a7a15613381071d036657935856797ccd344b5cbc23f00075462078 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in rc-phoenix-tpp-upper-funnel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7339748c4b25b1fb792f426edc2468aea1f9a626a53d8b25a29b364b48165d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47826 Malicious code in rc-phoenix-tpp-upper-funnel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7339748c4b25b1fb792f426edc2468aea1f9a626a53d8b25a29b364b48165d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-59336
Luanox is a module host for Lua packages. Prior to 0.1.1, a file traversal vulnerability can cause potential denial of service by overwriting Phoenix runtime files. Package names like ../../package are not properly filtered and pass the validity check of the rockspec verification system. This...
CVE-2025-59336 Relative Path Traversal in Luanox
Luanox is a module host for Lua packages. Prior to 0.1.1, a file traversal vulnerability can cause potential denial of service by overwriting Phoenix runtime files. Package names like ../../package are not properly filtered and pass the validity check of the rockspec verification system. This...
Phoenix RowHammer Attack Bypasses Advanced DDR5 Memory Protections in 109 Seconds
A team of academics from ETH Zürich and Google has discovered a new variant of a RowHammer attack targeting Double Data Rate 5 DDR5 memory chips from South Korean semiconductor vendor SK Hynix. The RowHammer attack variant, codenamed Phoenix CVE-2025-6202, CVSS score: 7.1, is capable of bypassing...
PT-2025-38061
Name of the Vulnerable Software and Affected Versions: Luanox versions prior to 0.1.1 Description: Luanox is a module host for Lua packages. A file traversal vulnerability can cause a denial of service by overwriting Phoenix runtime files. Package names, such as ../../package, are not properly...
Phoenix: Rowhammer Attacks on DDR5 Memory
Mitigation AMD released updated Platform Initialization PI packages to the Original Equipment Manufacturers OEM for AMD Ryzen™ Series processors. These updates allow customers to enable Mixed Refresh Mode, which is an existing DRAM workaround to rowhammer-style attacks. Please contact your OEM fo...
Malicious code in ursa-phoenix-hadron-terser-webpack-plugin (npm)
The package ursa-phoenix-hadron-terser-webpack-plugin was found to contain malicious code...