Malicious code in meli-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1895 Malicious code in meli-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1846 Malicious code in iberia-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1770 Malicious code in coinbase-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in amazon-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1696 Malicious code in @optimystic99/dev-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mep-ul-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d593c7ae7f8e32d4a74e793a97c54a82aba7a8e9123c55be97c8b4c254ce96f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1609 Malicious code in mep-ul-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d593c7ae7f8e32d4a74e793a97c54a82aba7a8e9123c55be97c8b4c254ce96f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in transaction-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c1efc9cf33a18e7f3c4294c39aabadf136974e4e2ee56c874ba337ac609c6b77 The only thing the package does is send out all the given data about a cryptocurrency transaction, including the private key, to a hardcoded webhook. Feedback...

Malicious code in solana-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4fcf79d026074d2ebc0ce48f578a5078acafca383dbd727a0b2e9f5a723f2702 The only thing the package does is send out all the given data about a cryptocurrency transaction, including the private key, to a hardcoded webhook. Feedback...

Malicious code in solders-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 eff6c26674dd4f0408742c46785656c3a5d19ca0a87366a60534d37d5a54e687 The only thing the package does is send out all the given data about a cryptocurrency transaction, including the private key, to a hardcoded webhook. Feedback...

MAL-2025-2999 Malicious code in solana-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4fcf79d026074d2ebc0ce48f578a5078acafca383dbd727a0b2e9f5a723f2702 The only thing the package does is send out all the given data about a cryptocurrency transaction, including the private key, to a hardcoded webhook. Feedback...

MAL-2025-3000 Malicious code in solders-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 eff6c26674dd4f0408742c46785656c3a5d19ca0a87366a60534d37d5a54e687 The only thing the package does is send out all the given data about a cryptocurrency transaction, including the private key, to a hardcoded webhook. Feedback...

MAL-2025-1504 Malicious code in upm-ci-utils-tes-t (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3db67af7201afa722ce928a46979afb3ac375ebe370e32d0578fd2cca9119bc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-16136

Name of the Vulnerable Software and Affected Versions: Mediawiki Core - Feed Utils versions 1.39 through 1.43 Description: The issue is related to improper encoding or escaping of output, which allows WebView Injection. This is a problem where output is not properly encoded or escaped, potentiall...

CVE-2022-4055 affecting package xdg-utils for versions less than 1.2.1-3

CVE-2022-4055 affecting package xdg-utils for versions less than 1.2.1-3. An upgraded version of the package is available that resolves this issue...

Prototype Pollution

utils-extend is vulnerable to Prototype Pollution. The vulnerability is due to the lib.extend function, which allows an attacker to modify the global prototype chain and potentially cause a denial of service DoS...

CVE-2024-57074

A prototype pollution in the lib.merge function of xe-utils v3.5.31 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57077

The latest version of utils-extend 1.0.8 is vulnerable to Prototype Pollution through the entry functions lib.extend. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the global prototype chain, causing denial of service DoS a the minimum...

GHSA-7QGG-VW88-CC99 utils-extend Prototype Pollution

The latest version of utils-extend 1.0.8 is vulnerable to Prototype Pollution through the entry functions lib.extend. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the global prototype chain, causing denial of service DoS a the minimum...