5924 matches found
EUVD-2025-35795
Malicious code in discord-utils-enhanced npm...
MAL-2025-48878 Malicious code in test-utils-vue3 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in internal-test-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b14723fa9c85ed09e8669f1e402756b97ce2654f9e2b222a57ca6d539d73afc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in acme-auth-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-48787 Malicious code in acme-auth-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in global-utils-helper-2025 (npm)
The package communicates with a domain associated with malicious activity...
Use of Hard-coded Cryptographic Key
Overview Affected versions of this package are vulnerable to Use of Hard-coded Cryptographic Key for encrypting sensitive configurations when NeuVector stores data. The static key can be used to retrieve configuration data. Remediation Upgrade github.com/neuvector/neuvector/share/utils to version...
Malicious code in ofjaaaah-helper-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c29444c36fe6eb68b1d21e6dfa6d59cd4cdf3477983d56e62b4c92d36d60476 Any computer that has this package installed or running should be considered...
MAL-2025-48749 Malicious code in ofjaaaah-helper-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c29444c36fe6eb68b1d21e6dfa6d59cd4cdf3477983d56e62b4c92d36d60476 Any computer that has this package installed or running should be considered...
EUVD-2025-35150
Malicious code in @jdtaro/dynamic-devtools-utils npm...
Malicious code in @jdtaro/dynamic-devtools-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31153e0cd25bffc9c1582e7fe176e131e49c4a1fdfdc58c55cdf25dcd99a5b55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview @jdtaro/dynamic-devtools-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...
EUVD-2025-35138
Malicious code in reactify-utils npm...
Malicious Package
Overview reactify-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
The vulnerability of the FeedUtils::formatDiffRow2() function in the Feed Utils component of the MediaWiki hypertext environment allows a violator to execute arbitrary code.
The vulnerability of the FeedUtils::formatDiffRow2 function in the Feed Utils component of the MediaWiki software framework relates to improper encoding or escaping of output data when processing the newpage parameter. Exploiting this vulnerability could allow an attacker to execute arbitrary cod...
unic (>=0.5.0, <=0.6.0), unic-bidi (0.6.0) +12 more potentially affected by unknown CVE via unic-utils (>=0.5.0, <=0.6.0)
unic-utils CARGO version =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.6.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0091...
RUSTSEC-2025-0091 `unic-utils` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained...
`unic-utils` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained...