MAL-2025-29478 Malicious code in polaris-viz-native (npm)

The package polaris-viz-native was found to contain malicious code...

MAL-2025-29477 Malicious code in polaris-viz-core (npm)

The package polaris-viz-core was found to contain malicious code...

MAL-2025-32906 Malicious code in seedling-viz-angular-wp2 (npm)

The package seedling-viz-angular-wp2 was found to contain malicious code...

Malicious code in seedling-viz-angular-wp2 (npm)

The package seedling-viz-angular-wp2 was found to contain malicious code...

Malicious code in polaris-viz-native (npm)

The package polaris-viz-native was found to contain malicious code...

Malicious code in polaris-viz-core (npm)

The package polaris-viz-core was found to contain malicious code...

MAL-2025-5980 Malicious code in zeus-mex-profile-viz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38871f47fd1979b619cbf11895907214ada4c4f1edca195009d3fd9f4ac9fcc3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ezer-promql-tree-viz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05504b5d2d9021afb1ee0c8ba55dc17f1d41a4f477637bddff24f2c0084b4749 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5933 Malicious code in lezer-promql-tree-viz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75c995399e97f574eb4cc3e4484bfabc69554ee170fa58d38740ba5d058568d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5912 Malicious code in ezer-promql-tree-viz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05504b5d2d9021afb1ee0c8ba55dc17f1d41a4f477637bddff24f2c0084b4749 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xstate-viz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78238616eb1778526dce3244328ae4d9592c69c518ff319b13b0f6ac0268ad79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11116 Malicious code in xstate-viz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78238616eb1778526dce3244328ae4d9592c69c518ff319b13b0f6ac0268ad79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

arci-urdf-viz (>=0.0.7, <=0.1.0), asp_lib (>=0.1.0, <=0.1.1) +96 more potentially affected by unknown CVE via fast-float (0.2.0)

fast-float CARGO version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on fast-float and may be impacted: - arci-urdf-viz =0.0.7, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.13.0, =0.19.0, =0.3.0, =0.4.1, =0.6.2, =0.3.2, =0.4.1, =0.3.2, =0.20.2 and more...

Malicious code in polaris-viz (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2879 Malicious code in polaris-viz (npm)

--- -= Per source details. Do not edit below this line.=-...

sessions (>=0.2.0, <=0.6.0), viz (>=0.1.0-alpha.3, <=0.1.0-alpha.10) +1 more potentially affected by CVE-2024-36400 via nano-id (>=0.1.1, <=0.3.3)

nano-id CARGO version =0.1.1, =0.2.0, =0.1.0-alpha.3, =0.1.0-alpha.5, =0.1.2 Source cves: CVE-2024-36400 Source advisory: OSV:GHSA-9HC7-6W9R-WJ94...

sessions (>=0.2.0, <=0.6.0), viz (>=0.1.0-alpha.3, <=0.1.0-alpha.10) +1 more potentially affected by CVE-2024-36400 via nano-id (>=0.1.1, <=0.3.3)

nano-id CARGO version =0.1.1, =0.2.0, =0.1.0-alpha.3, =0.1.0-alpha.5, =0.1.2 Source cves: CVE-2024-36400 Source advisory: OSV:RUSTSEC-2024-0343...

MAL-2022-4143 Malicious code in kentik-viz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0eec2e2f66071a5b65408130c2d4d2f59346c54611f6e29ec3f7ee4c7fe923e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kentik-viz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0eec2e2f66071a5b65408130c2d4d2f59346c54611f6e29ec3f7ee4c7fe923e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-JF55-RGPX-P6RX Malicious Package in iie-viz

Version 1.0.4 of iie-viz contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment. It's also recommended...