316 matches found
Malicious code in aa-bb-xx (npm)
The package aa-bb-xx was found to contain malicious code...
Malicious code in src.collection-bb-blocks (npm)
The package src.collection-bb-blocks was found to contain malicious code...
MAL-2025-17283 Malicious code in collection-bb-blocks (npm)
The package collection-bb-blocks was found to contain malicious code...
MAL-2025-20082 Malicious code in express-renew-bb-session (npm)
The package express-renew-bb-session was found to contain malicious code...
MAL-2025-15529 Malicious code in bb-builder (npm)
The package bb-builder was found to contain malicious code...
MAL-2025-15530 Malicious code in bb-docs-dgeni (npm)
The package bb-docs-dgeni was found to contain malicious code...
MAL-2025-15528 Malicious code in bb-babelfish-format (npm)
The package bb-babelfish-format was found to contain malicious code...
MAL-2025-13937 Malicious code in aa-bb-xx (npm)
The package aa-bb-xx was found to contain malicious code...
Malicious code in express-renew-bb-session (npm)
The package express-renew-bb-session was found to contain malicious code...
Malicious code in collection-bb-blocks (npm)
The package collection-bb-blocks was found to contain malicious code...
MAL-2025-33861 Malicious code in src.collection-bb-blocks (npm)
The package src.collection-bb-blocks was found to contain malicious code...
Malware in bb-escape
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in @bb-ui-utils/memoizer
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in bb-escape (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c12a3040a5a5d582f119c2e5627a62dfb92632bd4b8a66b9720f1251d114d878 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5267 Malicious code in bb-escape (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c12a3040a5a5d582f119c2e5627a62dfb92632bd4b8a66b9720f1251d114d878 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @bb-ui-utils/memoizer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 298f0b198a5e87e33744cb04b097dfcfe8733405304d437f19d451875e368d52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Arbitrary File Upload
Overview hipdevteam/bb-plugin is a Fork of BB Plugin Pro for use with composer Affected versions of this package are vulnerable to Arbitrary File Upload via the saveenabledicons function. An attacker can upload arbitrary files to the server by bypassing file type validation, which may allow...
CVE-2021-20783
Cross-site request forgery CSRF vulnerability in Optical BB unit E-WMTA2.3 allows a remote attacker to hijack the authentication of administrators via a specially crafted page...