1552 matches found
MAL-2025-68 Malicious code in kiota-typescript (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=-...
OPENSUSE-SU-2025:14619-1 firefox-esr-128.6.0-1.1 on GA media
These are all security issues fixed in the firefox-esr-128.6.0-1.1 package on the GA media of openSUSE Tumbleweed...
MAL-2025-56 Malicious code in @g.genie/api-demo-sample-lib4 (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain...
OPENSUSE-SU-2025:14616-1 libpoppler-cpp1-24.12.0-1.1 on GA media
These are all security issues fixed in the libpoppler-cpp1-24.12.0-1.1 package on the GA media of openSUSE Tumbleweed...
MAL-2024-12110 Malicious code in precompiled-wasabi100 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38f3f008b27c846a21dc6b847a1e4a2f4f705d51e81983df2c63a7ef6484a365 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-12097 Malicious code in openai-extension (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 025855a4aad79b7f6961770b428612b04f28558b5aaa0eafd1590c9bd641dcc0 The OpenSSF Package Analysis project identified 'openai-extension' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2025-8 Malicious code in 4m-clean-shopify-app (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff1dc78c54862db7c3a030ea6817abc308fbdfe0d28be84a7203e062ab025963 Any computer that has this package install...
CVE-2020-9250
There is an insufficient authentication vulnerability in some Huawei smart phone. An unauthenticated, local attacker can crafts software package to exploit this vulnerability. Due to insufficient verification, successful exploitation may impact the service. Vulnerability ID: HWPSIRT-2019-12302 Th...
CVE-2020-9250
There is an insufficient authentication vulnerability in some Huawei smart phone. An unauthenticated, local attacker can crafts software package to exploit this vulnerability. Due to insufficient verification, successful exploitation may impact the service. Vulnerability ID: HWPSIRT-2019-12302 Th...
MAL-2024-12054 Malicious code in uid-2-test-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f2900f53327b861bd4050d2e38c0e867e8ace72a97f5525cb74f56a7af8373e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
OPENSUSE-SU-2024:14592-1 git-bug-0.8.0+git.1733745604.d499b6e-1.1 on GA media
These are all security issues fixed in the git-bug-0.8.0+git.1733745604.d499b6e-1.1 package on the GA media of openSUSE Tumbleweed...
MAL-2024-11877 Malicious code in label-merge-conflicts-action (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0f4e7055373f34da86b2f4a870acff07073a74806372655dd69ac315c6c598d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
OPENSUSE-SU-2024:14585-1 cloudflared-2024.12.1-1.1 on GA media
These are all security issues fixed in the cloudflared-2024.12.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14583-1 MozillaFirefox-133.0.3-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-133.0.3-1.1 package on the GA media of openSUSE Tumbleweed...
MAL-2024-11863 Malicious code in 32red-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7c76ac7d57265d4cc494b13ff1a0000ff8cbe225dea90e42a200545dd8359e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11855 Malicious code in 000webhost-cloud (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e08b60d5a52c01bda8d2c896c137f380ee01c84b2cae31f0c367f67fc3db57c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11818 Malicious code in auth0-lock-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fc8cb7c85f580c66397adec583bbd6623eafcb98683fcf6299ca73188892009f The OpenSSF Package Analysis project identified 'auth0-lock-webpack' @ 99.99.99 npm as malicious. It is considered malicious because: - The...
Malicious code in python-bitget-connect (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 1797b7fdf9859888b5495817784ead0bdc01e6acad5ae410af1e1df89acbded6 Importing the module starts an obfuscated PowerShell code, which downloads and executes a remote script. On Windows, the script appears to just start the...
MAL-2024-11800 Malicious code in yir-image-gen-asana-rce (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 050cc0b4f55e2e2b44e9eaeb0b6b269c8eab27bb007239d6fc7cb318e55f475d The OpenSSF Package Analysis project identified 'yir-image-gen-asana-rce' @ 1.0.0 npm as malicious. It is considered malicious because: - The...
