Malicious code in vite-tsconfig-assistant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 867785f3a2ce4c75f70bdfe547c34b8c96ae89125ef2ee3b37835f5b752c36c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview vite-tsconfig-assistant is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

MAL-2025-47934 Malicious code in vite-tsconfig-assistant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 867785f3a2ce4c75f70bdfe547c34b8c96ae89125ef2ee3b37835f5b752c36c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-tsconfig-optimized (npm)

The package vite-tsconfig-optimized was found to contain malicious code...

MAL-2025-42112 Malicious code in vite-tsconfig-optimized (npm)

The package vite-tsconfig-optimized was found to contain malicious code...

MAL-2025-7076 Malicious code in @amber-team/tsconfig (npm)

The package @amber-team/tsconfig was found to contain malicious code...

Malicious code in @amber-team/tsconfig (npm)

The package @amber-team/tsconfig was found to contain malicious code...

Malicious code in vite-tsconfig-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5982ed9c063bb8a7de718b2960f09dab6a1dea1be2cbeebd8a5f8c3ce94816d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4572 Malicious code in nb-tsconfig (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in nb-tsconfig (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in vite-tsconfig-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8e87c316d95bb1306ba575056c1036de186e9370217e5fdde12d1e13cc316ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3801 Malicious code in vite-tsconfig-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8e87c316d95bb1306ba575056c1036de186e9370217e5fdde12d1e13cc316ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tsconfig-react-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4aff665839335434b8a93a1a8881d423eb7ff5ab92725d898e4db717468a59e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8042 Malicious code in tsconfig-react-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4aff665839335434b8a93a1a8881d423eb7ff5ab92725d898e4db717468a59e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Arbitrary Code Execution

typo3/cms is vulnerable to Arbitrary Code Execution. The vulnerability is due to improper handling of TSconfig fields in backend forms, allowing injection of malicious sequences and directory traversal...

Typo3 Broken Access Control in Import Module

It has been discovered that the Import/Export module is susceptible to broken access control. Regular backend users have access to import functionality which usually only is available to admin users or users having User TSconfig setting options.impexp.enableImportForNonAdminUser explicitly enable...

GHSA-HWW5-6X85-MC24 Typo3 Arbitrary Code Execution and Cross-Site Scripting in Backend API

Backend API configuration using Page TSconfig is vulnerable to arbitrary code execution and cross-site scripting. TSconfig fields of page properties in backend forms can be used to inject malicious sequences. Field tsconfigincludes is vulnerable to directory traversal leading to same scenarios as...

Typo3 Arbitrary Code Execution and Cross-Site Scripting in Backend API

Backend API configuration using Page TSconfig is vulnerable to arbitrary code execution and cross-site scripting. TSconfig fields of page properties in backend forms can be used to inject malicious sequences. Field tsconfigincludes is vulnerable to directory traversal leading to same scenarios as...

GHSA-X428-565F-8XJ2 TYPO3 Arbitrary Code Execution and Cross-Site Scripting in Backend API

Backend API configuration using Page TSconfig is vulnerable to arbitrary code execution and cross-site scripting. TSconfig fields of page properties in backend forms can be used to inject malicious sequences. Field tsconfigincludes is vulnerable to directory traversal leading to same scenarios as...

TYPO3 Arbitrary Code Execution and Cross-Site Scripting in Backend API

Backend API configuration using Page TSconfig is vulnerable to arbitrary code execution and cross-site scripting. TSconfig fields of page properties in backend forms can be used to inject malicious sequences. Field tsconfigincludes is vulnerable to directory traversal leading to same scenarios as...