Malicious code in airbnb-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5dbe417775cdf936de0b309b6f15596072d0e6111399a3f24d499f98f0fde022 The OpenSSF Package Analysis project identified 'airbnb-api-client' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

Malicious code in airbnb-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 569af68d5b2f70cc46c62d3be362723205c02819f13c60a456a6925c2f6d1dd2 The OpenSSF Package Analysis project identified 'airbnb-auth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in airbnb-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 302f06ee50a543ce401bd2fd81e36ce6491cfbcf2c0d900eb19e3768f4946098 The OpenSSF Package Analysis project identified 'airbnb-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-359 Malicious code in collapsible-group (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a424d4fcd62d35f9e9da962931dbc5fd39e9bfc3b4744a5f00c5e442b2ddb36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-23540

creationtimestamp| type| source ---|---|--- 2025-01-23 15:30:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113878382152309201 2025-01-23 15:34:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113878400792489848 2025-01-23 16:16:13+00:00| seen|...

CVE-2025-23966

creationtimestamp| type| source ---|---|--- 2025-01-22 15:21:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdoawnq7e2f 2025-01-22 15:49:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgdpspxwwf2i 2025-01-22 17:13:27+00:00| seen|...

CVE-2024-49742

In onCreate of NotificationAccessConfirmationActivity.java , there is a possible way to hide an app with notification access in Settings due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed f...

CVE-2024-49737

In applyTaskFragmentOperation of WindowOrganizerController.java, there is a possible way to launch arbitrary activities as the system UID due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...

Malicious code in react-native-apollo-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 643d99775fbe5d1e11235967329b1d9bfdd5f173b113db79c998b0ea7f2b7b3c The OpenSSF Package Analysis project identified 'react-native-apollo-devtools' @ 1.0.0 npm as malicious. It is considered malicious because: - T...

Malicious code in @moneyguide-devkit/style-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8d41e363cb9b67e73c6cfe2f5b71641d9289a57d80051c4e3e67b22db36574d8 The OpenSSF Package Analysis project identified '@moneyguide-devkit/style-provider' @ 1.0.1 npm as malicious. It is considered malicious because...

CVE-2025-21643

creationtimestamp| type| source ---|---|--- 2025-01-19 10:58:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2323 2025-01-19 11:12:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113854718095653986 2025-01-19 11:15:52+00:00| seen|...

Malicious code in dbximgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3a752546905d1373f7b092a98454b7ca4e820bebecb1af358ce0a6a72fa9a1e8 The OpenSSF Package Analysis project identified 'dbximgs' @ 2.0.0 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2025-133 Malicious code in tagmyphotosblog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 68718b8c6a0e78b22dbddaeb5a6be69dac34b17d2e20d9a2fdf08d6bbbf95a00 The OpenSSF Package Analysis project identified 'tagmyphotosblog' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in keystone-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d1e499fbcaddce6bdea8ab5e0bf4a301d23b6db8e65cb2647376df41c9850cb2 The OpenSSF Package Analysis project identified 'keystone-app' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-45341

creationtimestamp| type| source ---|---|--- 2025-01-16 22:15:09+00:00| seen| https://bsky.app/profile/golang.org/post/3lfvckap2p22o 2025-01-16 23:16:09+00:00| seen| https://bsky.app/profile/golang.org/post/3lfvfxdxeis2y 2025-01-17 12:34:52+00:00| seen|...

CVE-2024-45336

creationtimestamp| type| source ---|---|--- 2025-01-16 22:15:09+00:00| seen| https://bsky.app/profile/golang.org/post/3lfvckap2p22o 2025-01-16 23:16:09+00:00| seen| https://bsky.app/profile/golang.org/post/3lfvfxdxeis2y 2025-01-17 12:34:52+00:00| seen|...

CVE-2025-23530

creationtimestamp| type| source ---|---|--- 2025-01-16 20:17:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv3y66ylk2r 2025-01-16 20:48:55+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113839999202514556 2025-01-16 20:49:18+00:00| seen|...

CVE-2024-57162

creationtimestamp| type| source ---|---|--- 2025-01-16 16:15:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113838924965901071 2025-01-16 16:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuoi4p5q22s 2025-01-16 16:19:24+00:00| seen|...

CVE-2025-0456

creationtimestamp| type| source ---|---|--- 2025-01-16 02:02:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113835570652577456 2025-01-16 02:15:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lft7jul2dm2h 2025-01-16 02:48:42+00:00| seen|...

CVE-2025-0487

creationtimestamp| type| source ---|---|--- 2025-01-15 20:34:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113834279471674308 2025-01-15 20:54:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1860 2025-01-15 21:15:49+00:00| seen|...