Malicious code in osmo-ts (npm)

The package osmo-ts was found to contain malicious code...

Malicious code in @zalastax/nolb-react-ts (npm)

The package @zalastax/nolb-react-ts was found to contain malicious code...

Malicious code in crypto-primitives-ts (npm)

The package crypto-primitives-ts was found to contain malicious code...

Malicious code in echo-bot-ts-esm (npm)

The package echo-bot-ts-esm was found to contain malicious code...

Malicious code in blank-ts-monorepo-common (npm)

The package blank-ts-monorepo-common was found to contain malicious code...

Malicious code in ng-demo-lib-ts (npm)

The package ng-demo-lib-ts was found to contain malicious code...

Malicious code in fork-ts-checker-webpack-plugin-v5 (npm)

The package fork-ts-checker-webpack-plugin-v5 was found to contain malicious code...

MAL-2025-19121 Malicious code in echo-bot-ts-esm (npm)

The package echo-bot-ts-esm was found to contain malicious code...

MAL-2025-17936 Malicious code in dallify-ts (npm)

The package dallify-ts was found to contain malicious code...

MAL-2025-20787 Malicious code in fork-ts-checker-webpack-plugin-v5 (npm)

The package fork-ts-checker-webpack-plugin-v5 was found to contain malicious code...

MAL-2025-37251 Malicious code in ts-objectschema (npm)

The package ts-objectschema was found to contain malicious code...

MAL-2025-22981 Malicious code in ieee-mcoe-ts-cordova (npm)

The package ieee-mcoe-ts-cordova was found to contain malicious code...

MAL-2025-15803 Malicious code in blank-ts-monorepo-common (npm)

The package blank-ts-monorepo-common was found to contain malicious code...

(Pwn2Own) QNAP TS-464 reset_password.cgi Hard-coded Cryptographic Key Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of QNAP TS-464. Authentication is not required to exploit this vulnerability. The specific flaw exists within the resetpassword.cgi endpoint. The issue results from the use of a hard-coded...

(Pwn2Own) QNAP TS-464 reset_password.cgi Improper Certificate Validation Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of QNAP TS-464 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the resetpassword.cgi endpoint. The issue results from the lack of proper...

(Pwn2Own) QNAP TS-464 Active Directory Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of QNAP TS-464 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Active Directory integration. The issue results from the improper...

(Pwn2Own) QNAP TS-464 reset_password.cgi Improper Certificate Validation Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of QNAP TS-464 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the resetpassword.cgi endpoint. The issue results from the lack of...

(Pwn2Own) QNAP TS-464 Samba Command Argument Injection Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of QNAP TS-464 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the provided username during authentication. The issue...

(Pwn2Own) QNAP TS-464 rsync Daemon Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of QNAP TS-464 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the provided username and password during authentication...

(Pwn2Own) QNAP TS-464 Improper Handling of URL Encoding Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of QNAP TS-464 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the function responsible for URL decoding. The issue results from improper...