340 matches found
Malicious code in eslint-plugin-spectrum-web-components (npm)
The package eslint-plugin-spectrum-web-components was found to contain malicious code...
MAL-2025-25707 Malicious code in lwc-components-lightning (npm)
The package lwc-components-lightning was found to contain malicious code...
CVE-2021-37196
A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions = V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS unpacks specially crafted archi...
CVE-2021-37195
A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS accepts arbitrary code as...
MAL-2025-4159 Malicious code in @webhighlights/shared-components (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @abb-ux/commonux-web-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f22e30f31c7ac7adf96fb88b6ec251f1263a643a038b0fcba1db4b8ada61cb1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @sporta-technology/d11-web-components.typography (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3369 Malicious code in @sporta-technology/d11-web-components.typography (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @sporta-technology/d11-web-components.tooltip (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3368 Malicious code in @sporta-technology/d11-web-components.tooltip (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3367 Malicious code in @sporta-technology/d11-web-components.toggle-button (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @sporta-technology/d11-web-components.toggle-button (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3365 Malicious code in @sporta-technology/d11-web-components.timeline (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @sporta-technology/d11-web-components.timeline (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @sporta-technology/d11-web-components.text-link (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3364 Malicious code in @sporta-technology/d11-web-components.text-link (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @sporta-technology/d11-web-components.text-button (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @sporta-technology/d11-web-components.tags.tags-status (npm)
--- -= Per source details. Do not edit below this line.=-...