MAL-2025-14518 Malicious code in angry-apes--nft-collection297 (npm)

The package angry-apes--nft-collection297 was found to contain malicious code...

MAL-2025-17910 Malicious code in d2-collection (npm)

The package d2-collection was found to contain malicious code...

MAL-2025-27449 Malicious code in nft-generator-nft-collection363 (npm)

The package nft-generator-nft-collection363 was found to contain malicious code...

MAL-2025-27445 Malicious code in nft-generator-art-nft-collection683 (npm)

The package nft-generator-art-nft-collection683 was found to contain malicious code...

MAL-2025-27424 Malicious code in nft-art-generator-nft-collection283 (npm)

The package nft-art-generator-nft-collection283 was found to contain malicious code...

Malicious code in collection-bb-blocks (npm)

The package collection-bb-blocks was found to contain malicious code...

Malicious Package

Overview CAFEGeneral is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for...

Malicious Package

Overview setago3 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for social...

Malicious Package

Overview tiupz is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for social...

Malicious Package

Overview podu33332ss is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for...

Malicious Package

Overview podu332ss is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for soci...

Malicious Package

Overview backduo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for social...

Malicious Package

Overview deltago4 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for socia...

Malicious Package

Overview tgsendduo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for soci...

IBM QRadar SIEM Information Disclosure

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

IBM QRadar SIEM XML External Object Access Disclosure

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information using a...

Linux Distros Unpatched Vulnerability : CVE-2024-5688

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant. This vulnerability affects Firefox 127,...

Linux Distros Unpatched Vulnerability : CVE-2020-25646

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Ansible Collection community.crypto. opensslprivatekeyinfo exposes private key in logs. This directly impacts confidentiality CVE-2020-25646...

Linux Distros Unpatched Vulnerability : CVE-2023-29544

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused memory corruption and a potentially...

Linux Distros Unpatched Vulnerability : CVE-2023-5171

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a...