Malicious code in vuex-vue3 (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-47602 Malicious code in vuex-vue3 (npm)

The package communicates with a domain associated with malicious activity...

Incorrect User Management

Overview jeecgboot-vue3 is an Agent =============== 当前最新版本： 3.8.1（预计发布时间：2025-04-21） Affected versions of this package are vulnerable to Incorrect User Management via the sendMsg function in the /message/sysMessageTemplate/sendMsg path. An attacker can gain unauthorized access to sensitive...

Malicious code in vue3-image-base64 (npm)

The package vue3-image-base64 was found to contain malicious code...

MAL-2025-38676 Malicious code in vue3-image-base64 (npm)

The package vue3-image-base64 was found to contain malicious code...

Malicious code in client-vue3-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 949b1148db60c58f37c8fec03067aa1974329c0f5719de4425b8840f213b5f2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4976 Malicious code in client-vue3-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 949b1148db60c58f37c8fec03067aa1974329c0f5719de4425b8840f213b5f2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

HuoCMS 安全漏洞

Suq HuoCMS is a modern content management system based on ThinkPHP6 and Vue3 developed by Nanjing Digital Flag Technology Suq Company in China. A security vulnerability exists in HuoCMS 3.5.1 and earlier versions, which stems from a file upload feature that could lead to server compromise...

MAL-2025-1100 Malicious code in csmagnifier-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a41b68567cf24680e7cbca7353ab826a7c2aaf25438fa38f0d0187d61d34d0bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cscount-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11a586cf9af033069bb8c5123c27f5256d0465223f1525db391bbddde56a6f88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in csmagnifier-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a41b68567cf24680e7cbca7353ab826a7c2aaf25438fa38f0d0187d61d34d0bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cs-icons-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bf6991c8217c461988208239682ccf9c3ea1b42f51a0d382a8360308e951a43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1086 Malicious code in cs-icons-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bf6991c8217c461988208239682ccf9c3ea1b42f51a0d382a8360308e951a43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1096 Malicious code in cscount-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11a586cf9af033069bb8c5123c27f5256d0465223f1525db391bbddde56a6f88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in csquill-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb70d66798d8e5c76afe2bd162bc5ff3b1192768a4a261bc7bc2de0d6606cedf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cscropper-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03314c2593e63f6f953b281505c7a63eaa4fe7c3ffd71eb8fd8c28d5c1c16fd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1101 Malicious code in csquill-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb70d66798d8e5c76afe2bd162bc5ff3b1192768a4a261bc7bc2de0d6606cedf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cs-templates-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7eab2131a229bf433f5924ee12b5bd1e1e393c31b3027c28aecb5a187057d23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1091 Malicious code in cs-templates-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7eab2131a229bf433f5924ee12b5bd1e1e393c31b3027c28aecb5a187057d23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vue-loader-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c22e5d514334329c3b75f951d755b2a3ef9e122863f7c437530413cd6c49b986 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...