13121 matches found
Malicious code in @zalastax/nolb-_types_1 (npm)
The package @zalastax/nolb-types1 was found to contain malicious code...
Malicious code in xuanze-yu-kaishi (npm)
The package xuanze-yu-kaishi was found to contain malicious code...
Malicious code in kuryaken (npm)
The package kuryaken was found to contain malicious code...
Malicious code in iota-sync-json-andromeda (npm)
The package iota-sync-json-andromeda was found to contain malicious code...
Malicious code in @zalastax/nolb-angularo (npm)
The package @zalastax/nolb-angularo was found to contain malicious code...
MAL-2025-43775 Malicious code in checking-ip (npm)
The package checking-ip was found to contain malicious code...
MAL-2025-43892 Malicious code in copilotstudio-console (npm)
The package copilotstudio-console was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-46639 Malicious code in winston-datalog (npm)
The package winston-datalog was found to contain malicious code...
Malicious code in react-milton (npm)
The package react-milton was found to contain malicious code...
VulRTex: a Reasoning-Guided Approach to Identify Vulnerabilities from Rich-Text Issue Report
Software vulnerabilities exist in open-source software OSS, and the developers who discover these vulnerabilities may submit issue reports IRs to describe their details. Security practitioners need to spend a lot of time manually identifying vulnerability-related IRs from the community, and the...
ASB-A-353680402
In assertSafeToStartCustomActivity of AppRestrictionsFragment.java , there is a possible way to exploit a parcel mismatch resulting in a launch anywhere vulnerability due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. Us...
ASB-A-328182084
Bulletin has no description...
ASB-A-419014146
Bulletin has no description...
ASB-A-381419370
In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation...
ASB-A-384514657
Bulletin has no description...
MAL-2025-41994 Malicious code in ganachhe (npm)
The package ganachhe was found to contain malicious code...
MAL-2025-42050 Malicious code in oclif-typescript (npm)
The package oclif-typescript was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 588168406ce54991496f37d72c618c066f9326ccd7d9cf0a774edaf7bc4b4d4f This package installs a dependency hosted on a custom domain that runs a...
Malicious code in morgan-logger (npm)
The package morgan-logger was found to contain malicious code...