5211 matches found
CVE-2025-64483
Wazuh is a security detection, visibility, and compliance open source project. From version 4.9.0 to before 4.13.0, the Wazuh API – Agent Configuration in certain configurations allows authenticated users with read-only API roles to retrieve agent enrollment credentials through the...
EUVD-2025-199381
Malicious code in @voiceflow/utils-designer npm...
EUVD-2025-199428
Malicious code in @voiceflow/backend-utils npm...
MAL-2025-191282 Malicious code in @oku-ui/utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e363f9563598ec9e11de3c2f70d1e8f832d7cf86e80fa1ee85b454d7745c662 The package @oku-ui/utils was found to contain malicious code. Source: google-open-source-security...
MAL-2025-191334 Malicious code in @voiceflow/backend-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939c031191eb7578a914d631512a9cf7594b3fa8719c9d5a82dc8469a70a5a72 The package @voiceflow/backend-utils was found to contain malicious code. Source: ghsa-malware...
MAL-2025-191127 Malicious code in m25-transaction-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e91218f5eaff53a78f8a4c20f4090ee4c99958d5784c54a3ee2280d00658643 The package m25-transaction-utils was found to contain malicious code. Source: ghsa-malware...
Malicious code in m25-transaction-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e91218f5eaff53a78f8a4c20f4090ee4c99958d5784c54a3ee2280d00658643 The package m25-transaction-utils was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199123
Malicious code in m25-transaction-utils npm...
EUVD-2025-199199
Malicious code in @varsityvibe/utils npm...
MAL-2025-191148 Malicious code in victoria-wallet-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52da1ed8745249f87107187efa740b8362b45543bfa3e003ebdfd585b2e7ef2e The package victoria-wallet-utils was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199203
Malicious code in victoria-wallet-utils npm...
Malicious code in victoria-wallet-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52da1ed8745249f87107187efa740b8362b45543bfa3e003ebdfd585b2e7ef2e The package victoria-wallet-utils was found to contain malicious code. Source: ghsa-malware...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Malicious code in @ensdomains/test-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481ab00e5cd5767ce6cb39bcab250f36dca030dce7d89f8f41b0a2086e1ebdbb The package @ensdomains/test-utils was found to contain malicious code. Source: ghsa-malware...
Malicious code in @posthog/rrweb-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de65400909e7dab680997106feffcc22e5a954f60fe775e82db28e5529bacb0c The package @posthog/rrweb-utils was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190675 Malicious code in @posthog/rrweb-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de65400909e7dab680997106feffcc22e5a954f60fe775e82db28e5529bacb0c The package @posthog/rrweb-utils was found to contain malicious code. Source: ghsa-malware...
Malicious Package
Overview lululemon-b2b-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CVE-2025-64483 Wazuh API – Agent Configuration Has Improper Access Control in Agent Enrollment Endpoint
Wazuh is a security detection, visibility, and compliance open source project. From version 4.9.0 to before 4.13.0, the Wazuh API – Agent Configuration in certain configurations allows authenticated users with read-only API roles to retrieve agent enrollment credentials through the...
EUVD-2025-198510
Wazuh is a security detection, visibility, and compliance open source project. From version 4.9.0 to before 4.13.0, the Wazuh API – Agent Configuration in certain configurations allows authenticated users with read-only API roles to retrieve agent enrollment credentials through the...