20648 matches found
MAL-2025-1749 Malicious code in bybit-test (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1734 Malicious code in apple-parser (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1723 Malicious code in amazon-tools (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1721 Malicious code in amazon-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e065ee96bedcccbc1d717b33f9111467a598d6dd2b02fe1fdc4447ffee42a2f The OpenSSF Package Analysis project identified 'amazon-test' @ 1.0.0 npm as malicious. It is considered malicious because: - The package execut...
MAL-2025-1720 Malicious code in amazon-sync (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1717 Malicious code in airbnb-payment (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1715 Malicious code in airbnb-logger (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1703 Malicious code in abstract-eth (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1556 Malicious code in fluentui-repo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a946d5d0851f29bedadf8857d3b954ecf93da7aaa8b01cc198063141c739169d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-10152
creationtimestamp| type| source ---|---|--- 2025-02-26 06:25:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5474 2026-02-11 14:55:22+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-10152.yaml 2026-02-12 21:03:14+00:00| seen|...
GHSA-W32M-9786-JP63
creationtimestamp| type| source ---|---|--- 2025-02-25 19:44:55+00:00| seen| https://gist.github.com/ruokun-niu/25de36e2d9507c94536ff4058d807551...
MAL-2025-2948 Malicious code in coingenerator (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 78810d9638861bd92d3f96d7e29a552a41eb97b69b8deba84892cc7f458fb8c0 Package contains obfuscated code that exfiltrate basic data and awaits for commands from the remote server to execute them. This is a malicious copy of...
CVE-2025-1595
creationtimestamp| type| source ---|---|--- 2025-02-23 22:23:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5104 2025-02-24 02:04:28+00:00| seen| https://t.me/cvedetector/18767 2025-02-24 14:08:41+00:00| seen| Telegram/ix8r2tp3DRmpslsXrpXpnniJ8xqmY1Z9fZ2a75kItDIoKB...
RUSTSEC-2025-0013 resolve is unmaintained
resolve crate's GitHub repository is archived with no commits for seven years. Latest crates.io release is also seven years old. Possible alternatives hickory-resolver...
resolve is unmaintained
resolve crate's GitHub repository is archived with no commits for seven years. Latest crates.io release is also seven years old. Possible alternatives hickory-resolver...
PT-2025-10140 · Crates.Io · Resolve
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The software's GitHub repository has been archived with no commits for seven years, and the latest release on crates.io is also seven years old. Recommendations: At the moment, there is no...
mysql:8.0 security update
mecab 0.996-2.12 - Bump version for 'mysql' module rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'AppStream' repo - Resolves: 2180411 mecab-ipadic 2.7.0.20070801-17.0.1 - Rename the LICENSE.Fedora to LICENSE.oracle 2.7.0.20070801-17 - Bump the release - Resolves:...
GHSA-FH4V-V779-4G2W SSRF in sliver teamserver
Summary The reverse port forwarding in sliver teamserver allows the implant to open a reverse tunnel on the sliver teamserver without verifying if the operator instructed the implant to do so Reproduction steps Run server wget...
BIT-GITLAB-2025-1042 Files or Directories Accessible to External Parties in GitLab
An insecure direct object reference vulnerability in GitLab EE affecting all versions from 15.7 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to view repositories in an unauthorized way...
