1551 matches found
Malicious code in @art-ws/config-ts (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e845947405bf6a59280848d6a325827b53bdca23c8a3b28e4db032075842cccb Any computer that has this package installed or running should be considered fully compromised. All...
Malicious code in ts-imports (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eccb885c4d87f75ef3479173055a689c6b90773619272c8ccf891bd342a7128b Any computer that has this package installed or running should be considered fully compromised. All...
MAL-2025-47373 Malicious code in @art-ws/config-ts (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e845947405bf6a59280848d6a325827b53bdca23c8a3b28e4db032075842cccb Any computer that has this package installed or running should be considered fully compromised. All...
Malicious code in ts-jito (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf71580a117fc1eb648238b8dbf5e2919978bc9bb694df76ef5b844542839736 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview ts-jito is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
MAL-2025-47356 Malicious code in ts-jito (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf71580a117fc1eb648238b8dbf5e2919978bc9bb694df76ef5b844542839736 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47213 Malicious code in ts-gaussian (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28976f40d9c1e8c05d8a074ce4984cedef949d2d116e5131b5db71e55cd43695 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ts-gaussian (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28976f40d9c1e8c05d8a074ce4984cedef949d2d116e5131b5db71e55cd43695 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
CVE-2025-10096
A vulnerability was determined in SimStudioAI sim up to 1.0.0. This affects an unknown function of the file apps/sim/app/api/files/parse/route.ts. Executing manipulation of the argument filePath can lead to server-side request forgery. The attack can be executed remotely. The exploit has been...
CVE-2025-29882
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following...
CVE-2025-22409
In rfcsendbufuih of rfctsframes.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Malicious code in vite-ts-icon (npm)
The package vite-ts-icon was found to contain malicious code...
MAL-2025-42111 Malicious code in vite-ts-icon (npm)
The package vite-ts-icon was found to contain malicious code...
CVE-2025-30273
An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory. We have already fixed the vulnerability in the following versions: QTS 5.2.5.314...
CVE-2025-30271 QTS, QuTS hero
A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following...
CVE-2025-30264
A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.2.5.3145...
Malicious code in react-media-template-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5a2fff48804ddfb5297954a2040eb8f90fd5ca36c31568a46d56d860ecf47148 The OpenSSF Package Analysis project identified 'react-media-template-ts' @ 10.0.1 npm as malicious. It is considered malicious because: - The...
QNAP QTS 缓冲区错误漏洞
QNAP QTS is a NAS operating system developed by QNAPSystems, Inc. designed for network attached storage devices, providing data management, backup, multimedia entertainment, etc. QNAP QuTS hero is an enterprise-grade operating system developed by QNAP for its networked storage devices NAS, which ...