EUVD-2026-43724

A vulnerability in Sonatype Nexus Repository Manager's format-specific API key generation may allow a remote attacker to gain unauthorized access to repository operations as a targeted user. A format-specific API key realm NuGet API Key, Docker Bearer Token, or npm Bearer Token must be enabled an...

Malicious code in active-application (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6395 Malicious code in active-application (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious Package

Overview active-application is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...