Malicious code in across-indexer-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b8fef241ea15f212acce31cd8bcc9d561a7f8a55c8367d778cca91c189d8a3a7 The OpenSSF Package Analysis project identified 'across-indexer-monorepo' @ 7.1.1 npm as malicious. It is considered malicious because: - The...

CVE-2025-10815

creationtimestamp| type| source ---|---|--- 2025-09-22 21:13:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115250010527648121...

Malicious code in skiko-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 381c5141fd91ab3795d9f9dba07327b46acb9f0f3a869e49411412f5bcbe6ea2 The OpenSSF Package Analysis project identified 'skiko-js' @ 10.0.1 npm as malicious. It is considered malicious because: - The package...

CVE-2025-57452

In realme BackupRestore app v15.1.122810c08250314, improper URI scheme handling in com.coloros.pc.PcToolMainActivity allows local attackers to cause a crash and potential XSS via crafted ADB intents...

CVE-2025-57452

The CVE-2025-57452 entry affects the realme BackupRestore app, version 15.1.12_2810c08_250314, due to improper URI scheme handling in the component com.coloros.pc.PcToolMainActivity. This vulnerability could allow local attackers to trigger a crash and potential cross-site scripting (XSS) via cra...

MAL-2025-47439 Malicious code in porscheofficial (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in tml-navigation (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in lynx-dev (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-47435 Malicious code in lynx-dev (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-59476

A flaw was found in Jenkins. Improper restriction of characters inserted from user-specified content in log messages allows attackers to control log message content and misled administrators reviewing log output or hide malicious activities. Mitigation Mitigation for this issue is either not...

Malicious code in windap-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7911cd6f3ec328520fbdf9a40c8fbdaf0a0de4c92577870eaaabbb0c5f6868a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47424 Malicious code in windap-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7911cd6f3ec328520fbdf9a40c8fbdaf0a0de4c92577870eaaabbb0c5f6868a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @pc-analytics-filter/core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdfc2209384455df77ab889ef6aa71c136ff6c7c2f43bb529d93568e71917d2f Any computer that has this package installed or running should be considered...

Malicious code in kreme-circuits (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 115a80b8aadb1029e4fdf7ec27a30991a73af718770b70a89211f740bbad9c40 Any computer that has this package installed or running should be considered...

MAL-2025-47403 Malicious code in kreme-circuits (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 115a80b8aadb1029e4fdf7ec27a30991a73af718770b70a89211f740bbad9c40 Any computer that has this package installed or running should be considered...

Malicious code in suchinind (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a328ee17c3878f22beddf954e26fea98cfcedc0377a9aae3f9382b01cb55acf Any computer that has this package installed or running should be considered...

MAL-2025-47412 Malicious code in suchinind (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a328ee17c3878f22beddf954e26fea98cfcedc0377a9aae3f9382b01cb55acf Any computer that has this package installed or running should be considered...

MAL-2025-47393 Malicious code in bsd-form-ui-kit (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-47401 Malicious code in igame (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92630c29a80ab3e4195e1528efb3bd2de3c21723225eeec79687f40648f15b42 Any computer that has this package installed or running should be considered...

MAL-2025-47409 Malicious code in sbrugna (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b3eb6e4038d15cc9e9407d28d2c69d0217e22a392a0fe3305ee324be95d9f75 Any computer that has this package installed or running should be considered...