30 matches found
Malicious code in citi-common-ui (npm)
--- Credit: OpenSSF source...
Malicious code in citi-gcg-173875 (npm)
--- Credit: OpenSSF source...
Malicious code in @citi-icg-158830/elemental-chameleon (npm)
Source: amazon-inspector 698e88fd9d64450847d476a41187198acc173deacf9c5484791a4fdb6fbbe969 The package @citi-icg-158830/elemental-chameleon was found to contain malicious code. Source: ossf-package-analysis 584d2e027d86f89b78898d46a4aab1a0bd131897750c876c729e2247b1479a40 The OpenSSF Package Analys...
Malware in @citi-icg-171632/citicms-repo-component
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in @citi-icg-158830/icgds-react-css
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in @citi-icg-171632/citicms-repo-component (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 709bf171e1352b4760dad0827981bea713ab8b0b16e6864f012286c968e51de8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-3808 Malicious code in @citi-icg-158830/icgds-react-css (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6255b5d27ddf97d5093328983d54e39a05ce73176cdc472aa2df8499fa506f1e The package @citi-icg-158830/icgds-react-css was found to contain malicious code. Source: ghsa-malware...
Malicious code in @citi-icg-158830/icgds-react-css (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6255b5d27ddf97d5093328983d54e39a05ce73176cdc472aa2df8499fa506f1e The package @citi-icg-158830/icgds-react-css was found to contain malicious code. Source: ghsa-malware...
EUVD-2026-15588
Deserialization of Untrusted Data vulnerability in NooTheme CitiLights noo-citilights allows Object Injection.This issue affects CitiLights: from n/a through = 3.7.1...
CVE-2026-25367
Missing Authorization vulnerability in NooTheme CitiLights noo-citilights allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CitiLights: from n/a through 3.7.2...
MAL-2025-7123 Malicious code in @citi-gcg-167407/common (npm)
The package @citi-gcg-167407/common was found to contain malicious code...
Malicious code in @citi-gcg-167407/common (npm)
The package @citi-gcg-167407/common was found to contain malicious code...
Malicious code in @citi-gcg-167407/core-services (npm)
The package @citi-gcg-167407/core-services was found to contain malicious code...
MAL-2025-7124 Malicious code in @citi-gcg-167407/core-services (npm)
The package @citi-gcg-167407/core-services was found to contain malicious code...
Malicious code in citi-gcg-173875 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in citi-common-ui (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1985 Malicious code in citi-common-ui (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious Package
Overview citi-gcg-173875 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...
Would You Have Fallen for This Phone Scam?
You may have heard that today's phone fraudsters like to use caller ID spoofing services to make their scam calls seem more believable. But you probably didn't know that these fraudsters also can use caller ID spoofing to trick your bank into giving up information about recent transactions on you...
live.abculfoundation.netxtra.net XSS vulnerability
Open Bug Bounty ID: OBB-187450 Description| Value ---|--- Affected Website:| live.abculfoundation.netxtra.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6....