Lucene search
+L

3901 matches found

Snyk
Snyk
•added 2023/01/29 3:29 p.m.•7 views

Malicious Package

Overview @att-bit/duc.fragments.scrim is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2023/01/29 3:29 p.m.•6 views

Malicious Package

Overview @att-bit/duc.utils.conditional-wrapper is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2023/01/29 3:29 p.m.•9 views

Malicious Package

Overview @nelio-content/utils is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2023/01/29 3:29 p.m.•3 views

Malicious Package

Overview calendar-card-component is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2023/01/29 3:29 p.m.•2 views

Malicious Package

Overview syntaxmanager is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2023/01/29 3:29 p.m.•4 views

Malicious Package

Overview datagrid-text-filter-web is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2023/01/29 3:29 p.m.•7 views

Malicious Package

Overview @playgami/eslint-config-portal-react is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2023/01/29 3:29 p.m.•4 views

Malicious Package

Overview duc.fragments.spinner is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2023/01/29 3:29 p.m.•11 views

Malicious Package

Overview waffles2-presentation is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2023/01/29 3:29 p.m.•7 views

Malicious Package

Overview core-guest-loop-routes is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2023/01/29 3:29 p.m.•8 views

Malicious Package

Overview bootstrap-v5 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2023/01/29 3:29 p.m.•10 views

Malicious Package

Overview tree-node-web is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2023/01/29 3:29 p.m.•5 views

Malicious Package

Overview eumetcast-gluing is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2023/01/29 3:29 p.m.•5 views

Malicious Package

Overview ticket-parser2-py3 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2023/01/29 3:29 p.m.•7 views

Malicious Package

Overview sandbox-library is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2023/01/29 3:29 p.m.•9 views

Malicious Package

Overview qb2 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was installed...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2023/01/29 3:29 p.m.•7 views

Malicious Package

Overview sandbox-common is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2023/01/29 3:29 p.m.•7 views

Malicious Package

Overview yandex-yt-driver-rpc-bindings is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2023/01/29 3:29 p.m.•8 views

Malicious Package

Overview yandex-global-state-controller is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

9.8CVSS7.1AI score
SaveExploits0References3
attackerkb
attackerkb
•added 2023/01/26 9:16 p.m.•7 views

CVE-2022-40173

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...

5.8AI score
SaveExploits0References1
Rows per page
Query Builder