PT-2025-3748 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to insufficient input validation in a component of the Android operating system framework. This could allow an attacker to elevate their privileges. There is a potentia...

MAL-2024-8937 Malicious code in labelv2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0cda1c25c57bcf643d5f0b072d315ccff37c5423681fbd3f6f6970ab021f51a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tannucolingboys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis be8167659390a471b016dfb0b25a778b2a77374ac31f845966ea70ce799ca081 The OpenSSF Package Analysis project identified 'tannucolingboys' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8935 Malicious code in tannucolingboys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis be8167659390a471b016dfb0b25a778b2a77374ac31f845966ea70ce799ca081 The OpenSSF Package Analysis project identified 'tannucolingboys' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8934 Malicious code in @the-df-company/commod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5ef49313b5c6faeeb4fe243f85058ce379b31887177f5dbe49a4dac3252fe7f0 The OpenSSF Package Analysis project identified '@the-df-company/commod' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in @the-df-company/commod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5ef49313b5c6faeeb4fe243f85058ce379b31887177f5dbe49a4dac3252fe7f0 The OpenSSF Package Analysis project identified '@the-df-company/commod' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-8929 Malicious code in smp-imsc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5a2c37b45dcf00d1c87e46d7fee96a0d5d5736d22bc0094618bea415a79bed4e The OpenSSF Package Analysis project identified 'smp-imsc' @ 99.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8928 Malicious code in learning_npm1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f3b173b32e267c6a9b7455320bda81f08ce154ad6315aeaea540133a9f0ab232 The OpenSSF Package Analysis project identified 'learningnpm1' @ 100.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8922 Malicious code in vehicle-optionalproducts-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52513e322c63383065f4e0e5b8b22dbb1452248d372c74fd463402c7179e5abb The OpenSSF Package Analysis project identified 'vehicle-optionalproducts-ui' @ 99.0.0 npm as malicious. It is considered malicious because: - T...

MAL-2024-8938 Malicious code in @energysolutions/mylib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 08f12d3c3e2e99f5bcec121d93fe4ece6a29ff57478e2e93e0cff0d4309832ac The OpenSSF Package Analysis project identified '@energysolutions/mylib' @ 999999999.999999.999999 npm as malicious. It is considered malicious...

MAL-2024-8912 Malicious code in infosnap-secure-family-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e26fd78e593cb831595d3ef036383a3570e155771197138cd43afac672bfe304 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8911 Malicious code in dc-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5534b8254822e7e5f6e4ee2e6f748422783f8a2aebac5f16fca13c06af524468 The OpenSSF Package Analysis project identified 'dc-testing' @ 99.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8899 Malicious code in acronym-decoder-chrome-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1a3a001eb751394dba7b7d59d8580152ab849a2d8971aecc8c65f800c4276008 The OpenSSF Package Analysis project identified 'acronym-decoder-chrome-angular' @ 1.0.0 npm as malicious. It is considered malicious because: -...

Malicious code in acronym-decoder-chrome-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1a3a001eb751394dba7b7d59d8580152ab849a2d8971aecc8c65f800c4276008 The OpenSSF Package Analysis project identified 'acronym-decoder-chrome-angular' @ 1.0.0 npm as malicious. It is considered malicious because: -...

Malicious code in grv-teleport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6dfcd0021e0f1240c60e8000555475ca9c7eef5e0c7da1a3e54dbe3f288b1650 The OpenSSF Package Analysis project identified 'grv-teleport' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8897 Malicious code in onfido-web-sdk-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b0dd02cb44d3292fc8de6ab92614219cc989a1d92d108bf83dc0a40883b44f0d The OpenSSF Package Analysis project identified 'onfido-web-sdk-angular' @ 0.1.0 npm as malicious. It is considered malicious because: - The...

Malicious code in huehue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis af7a007aeaa62497171adf92eeafa97491ab9d48455624037e17e07dc6f9eb43 The OpenSSF Package Analysis project identified 'huehue' @ 0.0.1 npm as malicious. It is considered malicious because: - The package communicate...

CVE-2024-44047

creationtimestamp| type| source ---|---|--- 2024-09-18 01:39:28+00:00| seen| https://t.me/cvedetector/5875...

MAL-2024-8887 Malicious code in ui-extensions-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 612535ed853f3bcea44a30e8568888db73a09aa577ffd88994bf21ea077c985a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8885 Malicious code in stedi-integrations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b00a7c7aa40df7ec3808ab68391a9194f7441a10b24ce192d16f96277d4ba4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...