559 matches found
When Dependencies Turn Dangerous: Responding to the NPM Supply Chain Attack
On September 8, 2025, attackers compromised a set of 18 widely used npm packages —including chalk, debug, ansi-styles, and strip-ansi—collectively downloaded over 2.6 billion times per week. Through a targeted phishing campaign against a maintainer, the attackers published malicious versions...
Linux Distros Unpatched Vulnerability : CVE-2010-3822
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, accesses an uninitialized pointer during...
MAL-2025-46967 Malicious code in ansi-styles (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f82dc187071d265457effc48cb50c7ac209143e5da1a502a633a1c35b88aac67 Any computer that has this package installed or running should be considered fully compromised. All...
Malicious code in ansi-styles (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f82dc187071d265457effc48cb50c7ac209143e5da1a502a633a1c35b88aac67 Any computer that has this package installed or running should be considered fully compromised. All...
npm Packages With 2 Billion Weekly Downloads Hacked in Major Attack
Aikido Security flagged the largest npm attack ever recorded, with 18 packages like chalk, debug, and ansi-styles hacked…...
When saving a page to PDF, certain font styles could have led to a potential use-after-free crash. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.
...
Malicious code in node-ms-styles (npm)
The package node-ms-styles was found to contain malicious code...
MAL-2025-42039 Malicious code in node-ms-styles (npm)
The package node-ms-styles was found to contain malicious code...
Linux Distros Unpatched Vulnerability : CVE-2021-26271
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific...
Malicious code in @amber-team/remote-styles (npm)
The package @amber-team/remote-styles was found to contain malicious code...
Malicious code in twitch-styles (npm)
The package twitch-styles was found to contain malicious code...
Malicious code in common-styles (npm)
The package common-styles was found to contain malicious code...
Malicious code in base-styles (npm)
The package base-styles was found to contain malicious code...
Malicious code in wms-mobile-styles (npm)
The package wms-mobile-styles was found to contain malicious code...
MAL-2025-14315 Malicious code in alior-styles (npm)
The package alior-styles was found to contain malicious code...
Malicious code in botframework-webchat-styles (npm)
The package botframework-webchat-styles was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-27397 Malicious code in next-styles (npm)
The package next-styles was found to contain malicious code...
MAL-2025-15493 Malicious code in base-styles (npm)
The package base-styles was found to contain malicious code...