Malicious code in bootstrap4 (npm)

The package bootstrap4 was found to contain malicious code...

my-first-vue-project (=0.1.0), react-responsive-data-table (>=1.0.0 <=1.0.5) potentially affected by unknown CVE via bootstrap4 (=0.0.1-security)

bootstrap4 NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap4 and may be impacted: - my-first-vue-project =0.1.0 - react-responsive-data-table =1.0.0, =1.0.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159...

Debian: Security Advisory (DLA-4125-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious Package

Overview apnic-bootstrap4 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Malicious code in apnic-bootstrap4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 853c795136d870889046d367747863014d538abe8497ae756b113cd4e4f86734 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1056 Malicious code in apnic-bootstrap4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 853c795136d870889046d367747863014d538abe8497ae756b113cd4e4f86734 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...