3041 matches found
Malicious code in quick-code-balance-spy-java (npm)
The package quick-code-balance-spy-java was found to contain malicious code...
Malicious code in yaml-psi-tau-void-quick (npm)
The package yaml-psi-tau-void-quick was found to contain malicious code...
Malicious code in error-iota-file-quick-shell (npm)
The package error-iota-file-quick-shell was found to contain malicious code...
Malicious code in quick-start_onnxruntime-node (npm)
The package quick-startonnxruntime-node was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
Malicious code in quick-start (npm)
The package quick-start was found to contain malicious code...
MAL-2025-34105 Malicious code in stub-cat-good-quick-sigma (npm)
The package stub-cat-good-quick-sigma was found to contain malicious code...
MAL-2025-31296 Malicious code in quick-start (npm)
The package quick-start was found to contain malicious code...
MAL-2025-18251 Malicious code in delta-tree-quick-xi-rho (npm)
The package delta-tree-quick-xi-rho was found to contain malicious code...
MAL-2025-24939 Malicious code in lambda-fast-yaml-quick-virtualize (npm)
The package lambda-fast-yaml-quick-virtualize was found to contain malicious code...
MAL-2025-18307 Malicious code in deserialize-slow-warn-quick-export (npm)
The package deserialize-slow-warn-quick-export was found to contain malicious code...
A week in security (August 4 – August 10)
Last week on Malwarebytes Labs: Adult sites trick users into Liking Facebook posts using a clickjack Trojan Facebook users targeted in ‘login’ phish TeaOnHer, the male version of Tea, is leaking personal information on its users too How Google, Adidas, and more were breached in a Salesforce scam...
No QUIC certificate pinning with wolfSSL
...
UBUNTU-CVE-2025-54145
The QR scanner could allow arbitrary websites to be opened if a user was tricked into scanning a malicious link that leveraged Firefox's open-text URL scheme. This vulnerability affects Firefox for iOS 141...
CVE-2025-1729
A DLL hijacking vulnerability was reported in TrackPoint Quick Menu software that, under certain conditions, could allow a local attacker to escalate privileges...
CVE-2025-1729
A DLL hijacking vulnerability was reported in TrackPoint Quick Menu software that, under certain conditions, could allow a local attacker to escalate privileges...
CVE-2025-1729
A DLL hijacking vulnerability was reported in TrackPoint Quick Menu software that, under certain conditions, could allow a local attacker to escalate privileges...
CVE-2025-1729
CVE-2025-1729 affects Lenovo TrackPoint Quick Menu (TPQMAssistant.exe). A DLL hijacking flaw allows a local attacker to escalate privileges by placing a malicious hostfxr.dll in the TPQM directory where the binary is launched; the TPQM folder is writable by standard users, enabling this. The issu...
Lenovo TrackPoint Quick Menu 安全漏洞
Lenovo TrackPoint Quick Menu is a shortcut menu program from the Chinese company Lenovo. A security vulnerability exists in Lenovo TrackPoint Quick Menu, which stems from the presence of a DLL hijacking vulnerability that could lead to elevation of privilege by a local attacker...