Lucene search
+L

622 matches found

OSV
OSV
added 2025/10/03 7:56 p.m.8 views

RLSA-2025:8125 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: Out-of-bounds access when resolving Promise objects CVE-2025-4918 firefox: Out-of-bounds access when optimizing linear sums CVE-2025-4919 For more details about...

8.8CVSS8AI score0.08947EPSS
SaveExploits1References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/26 11:7 p.m.5 views

Malicious code in matplotliv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 491ff5ae8247837ff9be18d46366f453395dab2413f44f6251aff0b271f7d25b Typosqatting package collecting, but not exfiltrating thus fulfiling the educational promise, sensitive data --- Category: PROBABLYPENTEST - Packages looking...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/22 8:3 a.m.6 views

Malicious code in some-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3558d5270ba6945f13c577df7f903f2e449b54435c6aa2ee46d721ef5e9ea198 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Snyk
Snyk
added 2025/09/22 8:3 a.m.4 views

Malicious Package

Overview some-promise is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
added 2025/09/15 2:28 a.m.4 views

Malicious Package

Overview promise-with-resolvers-polyfil is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...

9.8CVSS6.8AI score
SaveExploits0References2
OSV
OSV
added 2025/09/06 11:22 a.m.6 views

MAL-2025-191739 Malicious code in giteegit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4a26c5d911f4394086eca9dfca0dfb8b05cc0675bac36dfdbec08e30f6d1abed Package exfiltrates source code files to a telegram channel, while the description promises saving them to a git service --- Category: MALICIOUS - The campaign...

7.1AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/05 5:10 p.m.4 views

Malicious code in neutrino-antares-promise-genomics (npm)

The package neutrino-antares-promise-genomics was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/09/05 5:10 p.m.1 views

MAL-2025-45297 Malicious code in neutrino-antares-promise-genomics (npm)

The package neutrino-antares-promise-genomics was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/05 5:10 p.m.3 views

Malicious code in promise-lightyear-chariklo-joviology (npm)

The package promise-lightyear-chariklo-joviology was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/09/05 5:10 p.m.2 views

MAL-2025-45735 Malicious code in quito-promise-protractor-supercluster (npm)

The package quito-promise-protractor-supercluster was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/09/05 5:10 p.m.3 views

MAL-2025-43877 Malicious code in concurrently-promise-umbriel-mdx (npm)

The package concurrently-promise-umbriel-mdx was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/09/05 5:10 p.m.1 views

MAL-2025-45603 Malicious code in promise-lightyear-chariklo-joviology (npm)

The package promise-lightyear-chariklo-joviology was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/09/05 5:10 p.m.0 views

MAL-2025-45602 Malicious code in promise-dendrochronology-await-library (npm)

The package promise-dendrochronology-await-library was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/05 5:10 p.m.3 views

Malicious code in cressida-promise-reveal-md-nashira (npm)

The package cressida-promise-reveal-md-nashira was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/05 5:10 p.m.4 views

Malicious code in quito-promise-protractor-supercluster (npm)

The package quito-promise-protractor-supercluster was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/05 5:10 p.m.2 views

Malicious code in concurrently-promise-umbriel-mdx (npm)

The package concurrently-promise-umbriel-mdx was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/09/05 5:10 p.m.1 views

MAL-2025-43909 Malicious code in cressida-promise-reveal-md-nashira (npm)

The package cressida-promise-reveal-md-nashira was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/09/05 5:10 p.m.3 views

MAL-2025-46119 Malicious code in spawn-public-phenomic-promise (npm)

The package spawn-public-phenomic-promise was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/01 8:43 p.m.4 views

Malicious code in promise-with-resolvers-polyfil (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aaa40ddd391e49632fb8ff493e7aab475c4004635e41533ea6b7223e96b29f5b Any computer that has this package installed or running should be considered...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2025/09/01 8:43 p.m.5 views

MAL-2025-45604 Malicious code in promise-with-resolvers-polyfil (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aaa40ddd391e49632fb8ff493e7aab475c4004635e41533ea6b7223e96b29f5b Any computer that has this package installed or running should be considered...

6.8AI score
SaveExploits0References1
Rows per page
Query Builder