ASB-A-299633613

In multiple functions of WifiScanModeActivity.java, there is a possible way to bypass a device config restriction due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Malicious code in eslint-plugin-react-hooks-published (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647dedd2c8ea8a9cef54b85666b74459095d17369da310d54a0c1960f87dafe6 The package eslint-plugin-react-hooks-published was found to contain malicious code. Source: ghsa-malware...

Malicious code in browser-client-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9ad0cf7ca8faf91e654dc6ceb89ca235f191edc099334e5d8cf1a070bfb128a The package browser-client-neptune was found to contain malicious code. Source: ghsa-malware...

CVE-2022-37055

creationtimestamp| type| source ---|---|--- 2025-11-27 11:52:43+00:00| seen| https://threatintel.cc/2025/11/27/botnet-takes-advantage-of-aws.html 2025-11-27 12:52:30+00:00| seen| https://infosec.exchange/users/edwardk/statuses/115621753678740046 2025-11-27 15:20:22+00:00| seen|...

CVE-2025-33203

creationtimestamp| type| source ---|---|--- 2025-11-26 16:25:11+00:00| seen| https://infosec.exchange/users/AAKL/statuses/115616927159484156 2025-11-26 17:31:15+00:00| seen| https://mastodon.social/ap/users/115426718704364579/statuses/115617187434161563 2025-11-26 17:31:31+00:00| seen|...

Malicious code in signup-failover (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 312b617198eea306feca99cf5c14a0edb7668482ca605c8e74c2d20f71eddd19 The package signup-failover was found to contain malicious code. Source: ghsa-malware 930d3ccde5bf7b3147cb807fddbc366f04c3185a70a8ff885f106503b657300...

Malicious code in vue3-transpiler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61eaca42a219c9b161768c7938d34f6bc4d6e169c5ae43e88acf7a8a70be537b The package vue3-transpiler was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in lyft-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70fc3f07a26106b927cf0e4fc2f5f7692c8392b48700359bccb2618bc1ac1565 The package lyft-ui was found to contain malicious code. Source: ossf-package-analysis 1eca95468591ff582df3fadd1de8f6ffef5eb00720afbd1a511b5ea75ab556...

Malicious code in doordash-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2c2fc3e4bccd347a784ca9271e03d26dcc7e89c2e697f9e04b2e1e26cfc80d The package doordash-ui was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in snapchat-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80100098d97efb3e0e143ef48523c4bf1724d39fe46eec08532a084d22ef911d The package snapchat-ui was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in hilton-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f865ea8e9dc8af2f134e9b7fc318eceef8ff54af8fc491d1feb2d2c5788441f4 The package hilton-ui was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190616 Malicious code in uber-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb767de450fdafc6d2aa88f77a1f0a95188ddb866565c91258711f3434ce561e The package uber-ui was found to contain malicious code. Source: ossf-package-analysis 9706819391825d94f76cf6530978ae5e88f3a58ccc386090ef6523825393fb...

MAL-2025-190612 Malicious code in instacart-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e2fadf49fd1948b4d1d7049083d559cfdaec04a7247f1355729b1278b9bd3e2 The package instacart-ui was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in o2-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12445272ee24c376909e302bc2f4fe2c23af7aae5479ca74493a57adcdd4f028 The package o2-modal was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190604 Malicious code in airbnb-react-router-legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbad26f42924fe90947efc559b87354b3cc495e2aad542844029ebfe7d0ec3d9 The package airbnb-react-router-legacy was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in wishlist_dropdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96af5d4cffbd1a2bb13ecd403b9acf5e0fe62f6df151c6b511f556c9c0a11c31 The package wishlistdropdown was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in airbnb-blueimp-file-upload (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e31d7485138d523c3fc40982b857b4c758f73f46c1bd66952aa2f877625b480 The package airbnb-blueimp-file-upload was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in airbnb-luxury-messaging (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3721ccc0b94a8795edd99efa6ea640102c705346c6270a7ac203911797eaa7e The package airbnb-luxury-messaging was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in airbnb-story-constants (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ee587585b5d6ce7a559b01b7ca42796dcd026647cce38e2056a0893bd4c7429 The package airbnb-story-constants was found to contain malicious code. Source: ossf-package-analysis...

Salesforce Flags Unauthorized Data Access via Gainsight-Linked OAuth Activity

Salesforce has warned of detected "unusual activity" related to Gainsight-published applications connected to the platform. "Our investigation indicates this activity may have enabled unauthorized access to certain customers' Salesforce data through the app's connection," the company said in an...