Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

An attacker could have leveraged the Windows Error Reporter to run arbitrary code on the system escaping the sandbox. *Note:* This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.

...

Linux Distros Unpatched Vulnerability : CVE-2023-2233

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An improper authorization issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.2.8, all versions starting from 16.3...

MAL-2025-41455 Malicious code in @revizor/reporter-gitlab (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41454 Malicious code in @revizor/reporter-console (npm)

--- -= Per source details. Do not edit below this line.=-...

Linux Distros Unpatched Vulnerability : CVE-2022-2244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An improper authorization vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allow...

Malicious code in wdio-junit-reporter-file (npm)

The package wdio-junit-reporter-file was found to contain malicious code...

Malicious code in exchange-rate-reporter (npm)

The package exchange-rate-reporter was found to contain malicious code...

Malicious code in @frozen-team-qa/playwright-slack-reporter (npm)

The package @frozen-team-qa/playwright-slack-reporter was found to contain malicious code...

MAL-2025-34262 Malicious code in sw-reporter (npm)

The package sw-reporter was found to contain malicious code...

MAL-2025-7957 Malicious code in @frozen-team-qa/playwright-slack-reporter (npm)

The package @frozen-team-qa/playwright-slack-reporter was found to contain malicious code...

Malicious code in sw-reporter (npm)

The package sw-reporter was found to contain malicious code...

Malicious code in jest-sync-json-reporter (npm)

The package jest-sync-json-reporter was found to contain malicious code...

MAL-2025-38952 Malicious code in wdio-junit-reporter-file (npm)

The package wdio-junit-reporter-file was found to contain malicious code...

MAL-2025-20037 Malicious code in exchange-rate-reporter (npm)

The package exchange-rate-reporter was found to contain malicious code...

MAL-2025-23745 Malicious code in jest-sync-json-reporter (npm)

The package jest-sync-json-reporter was found to contain malicious code...

GHSA-76R7-HHXJ-R776 Active Record logging vulnerable to ANSI escape injection

This vulnerability has been assigned the CVE identifier CVE-2025-55193 Impact The ID passed to find or similar methods may be logged without escaping. If this is directly to the terminal it may include unescaped ANSI sequences. Releases The fixed releases are available at the normal locations...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: containerd-fips, openbao-k8s, glow, pguser, k6-fips, snyk-cli, jitsucom-bulker, terraform-provider-kubernetes, kube-metrics-adapter-fips, cilium-envoy-fips, kubelet-csr-approver-fips, rabbitmq-messaging-topology-operator, spire-server, hubble,...

Linux Distros Unpatched Vulnerability : CVE-2024-2605

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker could have leveraged the Windows Error Reporter to run arbitrary code on the system escaping the sandbox. Note: This issue only affected Windows...

ManageEngine Exchange Reporter Plus RCE

The version of ManageEngine Exchange Reporter Plus on the Host is prior to 5722. It is, therefore, affected by an RCE Vulnerability where Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and prior are vulnerable to Remote code execution in the Content Search module. Note that Nessus has...