82 matches found
Malicious code in simple-js-sha3-384 (npm)
The package simple-js-sha3-384 was found to contain malicious code...
Malicious code in j3-sha3 (npm)
The package j3-sha3 was found to contain malicious code...
Malicious code in jr-sha3 (npm)
The package jr-sha3 was found to contain malicious code...
Malicious code in ks-sha3 (npm)
The package ks-sha3 was found to contain malicious code...
Malicious code in jc-sha3 (npm)
The package jc-sha3 was found to contain malicious code...
Malicious code in jq-sha3 (npm)
The package jq-sha3 was found to contain malicious code...
MAL-2025-22742 Malicious code in hs-sha3 (npm)
The package hs-sha3 was found to contain malicious code...
MAL-2025-16221 Malicious code in bs-sha3 (npm)
The package bs-sha3 was found to contain malicious code...
MAL-2025-24787 Malicious code in ks-sha3 (npm)
The package ks-sha3 was found to contain malicious code...
Malicious code in hs-sha3 (npm)
The package hs-sha3 was found to contain malicious code...
Malicious code in simple-js-sha3-256 (npm)
The package simple-js-sha3-256 was found to contain malicious code...
Malicious code in simple-js-sha3-512 (npm)
The package simple-js-sha3-512 was found to contain malicious code...
Malicious code in bs-sha3 (npm)
The package bs-sha3 was found to contain malicious code...
Malicious code in zs-sha3 (npm)
The package zs-sha3 was found to contain malicious code...
Malicious code in simple-js-sha3 (npm)
The package simple-js-sha3 was found to contain malicious code...
MAL-2025-24128 Malicious code in jw-sha3 (npm)
The package jw-sha3 was found to contain malicious code...
MAL-2025-23907 Malicious code in jr-sha3 (npm)
The package jr-sha3 was found to contain malicious code...
MAL-2025-33271 Malicious code in simple-js-sha3-512 (npm)
The package simple-js-sha3-512 was found to contain malicious code...
Weak Password Hashing
Manifest is vulnerable to Weak Password Hashing. The vulnerability is due to improper password hashing due to the use of SHA3 without a salt, making user passwords more susceptible to cracking if an attacker gains access to the database...
Manifest Uses a One-Way Hash without a Salt
Summary Manifest employs a weak password hashing implementation that uses SHA3 without a salt. This exposes user passwords to a higher risk of being cracked if an attacker gains access to the database. Without the use of a salt, identical passwords across multiple users will result in the same...