13120 matches found
Malicious code in @zalastax/nolb-eslint-config-j (npm)
The package @zalastax/nolb-eslint-config-j was found to contain malicious code...
MAL-2025-42508 Malicious code in @erboladaiteas/unde-eum (npm)
The package @erboladaiteas/unde-eum was found to contain malicious code...
MAL-2025-45125 Malicious code in map-frequently-forward (npm)
The package map-frequently-forward was found to contain malicious code...
Malicious code in bambang-tomat29-breki (npm)
The package bambang-tomat29-breki was found to contain malicious code...
MAL-2025-43775 Malicious code in checking-ip (npm)
The package checking-ip was found to contain malicious code...
MAL-2025-46639 Malicious code in winston-datalog (npm)
The package winston-datalog was found to contain malicious code...
MAL-2025-43892 Malicious code in copilotstudio-console (npm)
The package copilotstudio-console was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
Malicious code in react-milton (npm)
The package react-milton was found to contain malicious code...
VulRTex: a Reasoning-Guided Approach to Identify Vulnerabilities from Rich-Text Issue Report
Software vulnerabilities exist in open-source software OSS, and the developers who discover these vulnerabilities may submit issue reports IRs to describe their details. Security practitioners need to spend a lot of time manually identifying vulnerability-related IRs from the community, and the...
ASB-A-328182084
Bulletin has no description...
ASB-A-381419370
In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation...
ASB-A-384514657
Bulletin has no description...
ASB-A-419014146
Bulletin has no description...
ASB-A-353680402
In assertSafeToStartCustomActivity of AppRestrictionsFragment.java , there is a possible way to exploit a parcel mismatch resulting in a launch anywhere vulnerability due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. Us...
Malicious code in d360-web (npm)
The package d360-web was found to contain malicious code...
Malicious code in ganacche (npm)
The package ganacche was found to contain malicious code...
Malicious code in sqrt_module (npm)
The package sqrtmodule was found to contain malicious code...
MAL-2025-42050 Malicious code in oclif-typescript (npm)
The package oclif-typescript was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 588168406ce54991496f37d72c618c066f9326ccd7d9cf0a774edaf7bc4b4d4f This package installs a dependency hosted on a custom domain that runs a...