44 matches found
Malicious code in iron-bem (npm)
The package iron-bem was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in bem-page-object (npm)
The package bem-page-object was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in bem-mvc-direct (npm)
--- Credit: OpenSSF source...
Malicious Package
Overview bem-mvc-direct is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview bem-page-object is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in iron-bem (npm)
The package iron-bem was found to contain malicious code...
Malicious code in bem-page-object (npm)
The package bem-page-object was found to contain malicious code...
MAL-2025-23389 Malicious code in iron-bem (npm)
The package iron-bem was found to contain malicious code...
MAL-2025-15592 Malicious code in bem-page-object (npm)
The package bem-page-object was found to contain malicious code...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS due to improper sanitization of the bem Twig function. Note: This is only exploitable when the function is used outside of Drupal. If the Drupal Attribute class exists, the function uses it and it does escape...
Malicious code in bem-mvc-direct (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1820 Malicious code in bem-mvc-direct (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious Package
Overview toolbox-bem-bundle is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...
Malicious Package
Overview bem-mvc-direct is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...
MAL-2023-895 Malicious code in toolbox-bem-bundle (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7d90e4edafca946a3c4746d96347b41770e4cf2fd362e3dcaa984b69e3fc64f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in toolbox-bem-bundle (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7d90e4edafca946a3c4746d96347b41770e4cf2fd362e3dcaa984b69e3fc64f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in toolbox-bem-bundle
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
bem-lyon.fr Cross Site Scripting vulnerability OBB-2841908
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Malicious code in cisco-bem-network-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36d6613f246fd08612e8b2fd3292d25600598f0b2ad7748c88b8014e41e632c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1906 Malicious code in cisco-bem-network-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36d6613f246fd08612e8b2fd3292d25600598f0b2ad7748c88b8014e41e632c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...