Cross-site Scripting (XSS)

Overview org.webjars:uikit is a lightweight and modular front-end framework for developing fast and powerful web interfaces. Affected versions of this package are vulnerable to Cross-site Scripting XSS in the data-caption attribute due to insufficient input sanitisation and output escaping. An...

Cross-site Scripting (XSS)

Overview org.webjars.bower:uikit is a lightweight and modular front-end framework for developing fast and powerful web interfaces. Affected versions of this package are vulnerable to Cross-site Scripting XSS in the data-caption attribute due to insufficient input sanitisation and output escaping...

Cross-site Scripting (XSS)

Overview org.webjars.bowergithub.uikit:uikit is a lightweight and modular front-end framework for developing fast and powerful web interfaces. Affected versions of this package are vulnerable to Cross-site Scripting XSS in the data-caption attribute due to insufficient input sanitisation and outp...

Malicious code in unity-uikit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 51deb514af09803c9a68d2121383fb67c161c449c07c6c34aa3a53500477eca4 The OpenSSF Package Analysis project identified 'unity-uikit' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9429 Malicious code in unity-uikit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 51deb514af09803c9a68d2121383fb67c161c449c07c6c34aa3a53500477eca4 The OpenSSF Package Analysis project identified 'unity-uikit' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sendbird-uikit-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaffc5bb1fbe1dacdaed2b5c1c01a1b1a477d9f4572976e8a0c637012233adc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9252 Malicious code in sendbird-uikit-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaffc5bb1fbe1dacdaed2b5c1c01a1b1a477d9f4572976e8a0c637012233adc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8976 Malicious code in uikit-app-promotions-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d19072ff8c8ab1bd3da76aae8b83610fb37811142076666d675f5a7e2fbae6f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sendbird-uikit-gpt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c0159cc60889c7ed6fb80ba101153a9858406a8f7a2d72825b6a3bbd597ca71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uikit-app-promotions-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d19072ff8c8ab1bd3da76aae8b83610fb37811142076666d675f5a7e2fbae6f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8974 Malicious code in sendbird-uikit-gpt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c0159cc60889c7ed6fb80ba101153a9858406a8f7a2d72825b6a3bbd597ca71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1330 Malicious code in elk-uikit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aaece47ca73a2646b0cb728b7816026ec3135f48e18054950dce89f8bf9073b0 The OpenSSF Package Analysis project identified 'elk-uikit' @ 99.99.1 npm as malicious. It is considered malicious because: - The package execut...

Malicious code in elk-uikit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aaece47ca73a2646b0cb728b7816026ec3135f48e18054950dce89f8bf9073b0 The OpenSSF Package Analysis project identified 'elk-uikit' @ 99.99.1 npm as malicious. It is considered malicious because: - The package execut...

About the security content of visionOS 1.1

About the security content of visionOS 1.1 This document describes the security content of visionOS 1.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...

MAL-2024-1035 Malicious code in uikit-dark-mode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1635673444c06a301ab432c5be76003f80d7d35f1d66f5706f0bef811b9070cf The OpenSSF Package Analysis project identified 'uikit-dark-mode' @ 1.999.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in uikit-dark-mode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1635673444c06a301ab432c5be76003f80d7d35f1d66f5706f0bef811b9070cf The OpenSSF Package Analysis project identified 'uikit-dark-mode' @ 1.999.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in repsol-uikit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0ded61aa0f6be46c0b02bb6eb5deb82d4dd4830e41a76cdf52d9d21576c50c57 The OpenSSF Package Analysis project identified 'repsol-uikit' @ 9.999.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8053 Malicious code in repsol-uikit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0ded61aa0f6be46c0b02bb6eb5deb82d4dd4830e41a76cdf52d9d21576c50c57 The OpenSSF Package Analysis project identified 'repsol-uikit' @ 9.999.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in nwa-uikit-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 90a7d076b934f9928aa5301f8d62f0218fd96a1f59a26102659ee688114d764a The OpenSSF Package Analysis project identified 'nwa-uikit-web' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious Package

Overview repsol-uikit is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...