Malicious Package

Overview allianz-neo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

Malicious code in allianz-neo (npm)

The package allianz-neo was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in allianz-neo (npm)

The package allianz-neo was found to contain malicious code...

MAL-2025-14323 Malicious code in allianz-neo (npm)

The package allianz-neo was found to contain malicious code...

Allianz Life says majority of 1.4 million US customers’ info breached

Insurance company Allianz Life was breached, exposing the data of most of its 1.4 million American customers. According to Allianz, an attacker gained access to a third-party, cloud-based Customer Relationship Management CRM system through social engineering. The company filed a data breach...

Allianz Life Data Breach Hits 1.4 Million Customers

Allianz Life Insurance confirms a July 2025 data breach impacting 1.4 million customers, financial pros and employees. Learn how social engineering exploited a third-party CRM, the hallmarks of Scattered Spider tactics, and the broader risks of supply chain vulnerabilities...

Malware in allianz

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2023-8715 Malicious code in allianz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3acefcd666d8be4ff038f0b8b5999c4f2921bc275a04c9480e3cfcc95a190fca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

allianz-grabfeldgau.de Cross Site Scripting vulnerability OBB-3731531

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious Package

Overview allianz-icons is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malware in allianz-icons

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2023-88 Malicious code in allianz-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5206dbf9ed839ec30f1f181c10bf1b267787c0255ef6048e6fcc0fec427faf9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in allianz-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5206dbf9ed839ec30f1f181c10bf1b267787c0255ef6048e6fcc0fec427faf9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ubezpieczeniaallianz.pl Cross Site Scripting vulnerability OBB-2989114

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malware in @allianzndbx/allianz-icons

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2022-69 Malicious code in @allianzndbx/allianz-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cab9c214e3dd5fc421e8fcf2250167da41ffe03de081bac02157ad3d4b01595c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @dgtls/allianz-chat-window

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @dgtls/allianz-chat-window (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8abdec13c4b20352e0089439f69c26d650bab72205190b1710aba158da27402 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

allianz-devissante.fr Cross Site Scripting vulnerability OBB-2601416

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

allianz-devisobseques.fr Cross Site Scripting vulnerability OBB-2463068

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...