MAL-2025-10965 Malicious code in @zalastax/nolb-com (npm)

The package @zalastax/nolb-com was found to contain malicious code...

MAL-2025-19639 Malicious code in en.ephoto360.com (npm)

The package en.ephoto360.com was found to contain malicious code...

MAL-2025-7137 Malicious code in @corptools-frontend/northwestregisteredagent.com (npm)

The package @corptools-frontend/northwestregisteredagent.com was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-17325 Malicious code in com.microsoft.azure.spatial-anchors-sdk.core (npm)

The package com.microsoft.azure.spatial-anchors-sdk.core was found to contain malicious code...

Malicious code in com.unity.standardevents (npm)

The package com.unity.standardevents was found to contain malicious code...

Malicious code in uolpainelcloud-painelcloud-host-uol-com-br (npm)

The package uolpainelcloud-painelcloud-host-uol-com-br was found to contain malicious code...

Malicious code in com.digmap.voicerecog (npm)

The package com.digmap.voicerecog was found to contain malicious code...

Malicious code in begin.com (npm)

The package begin.com was found to contain malicious code...

Malicious code in com.microsoft.azure.spatial-anchors-sdk.windows (npm)

The package com.microsoft.azure.spatial-anchors-sdk.windows was found to contain malicious code...

MAL-2025-10969 Malicious code in @zalastax/nolb-com_v (npm)

The package @zalastax/nolb-comv was found to contain malicious code...

MAL-2025-17327 Malicious code in com.microsoft.azure.spatial-anchors-sdk.windows (npm)

The package com.microsoft.azure.spatial-anchors-sdk.windows was found to contain malicious code...

MAL-2025-10971 Malicious code in @zalastax/nolb-com_x (npm)

The package @zalastax/nolb-comx was found to contain malicious code...

CVE-2025-8745

CVE-2025-8745 affects Weee RICEPO App 6.17.77 on Android, specifically the com.ricepo.app component. The vulnerability arises from improper export of AndroidManifest.xml handling, enabling a local-attack impact (confidentiality impacted). Exploitation details are publicly disclosed; vendor was co...

CVE-2025-55014

The YouDao plugin for StarDict, as used in stardict 3.0.7+git20220909+dfsg-6 in Debian trixie and elsewhere, sends an X11 selection to the dict.youdao.com and dict.cn servers via cleartext HTTP...

UBUNTU-CVE-2025-55014

The YouDao plugin for StarDict, as used in stardict 3.0.7+git20220909+dfsg-6 in Debian trixie and elsewhere, sends an X11 selection to the dict.youdao.com and dict.cn servers via cleartext HTTP...

Caixin News App 安全漏洞

Caixin News App is a news app application from China Caixin Caixin News. A security vulnerability exists in Caixin News App version 8.0.1, which originates from an improper export of Android application components due to misuse of the file AndroidManifest.xml in the component com.caixin.news...

TVB Big Big Shop App 安全漏洞

TVB Big Big Shop App is a mobile shopping application of Television Broadcasts TVB Corporation of Hong Kong, China. A security vulnerability exists in TVB Big Big Shop App version 2.9.0, which originates from an improper export of Android application components due to misuse of the file...

MAL-2025-5905 Malicious code in crypto-com-developer-platform-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3ba03d0d0285dec410f541b8e7fb12a809792658d08b88105efe3ecf507350b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-34090

Rejected reason: Neither filed by Chrome nor a valid security vulnerability...

CVE-2025-34090

The CVE-2025-34090 entries reveal a local security bypass in Google Chrome related to the AppBound cookie encryption mechanism. Root cause: insufficient validation of COM server paths during inter-process communication allows a low-privilege attacker to hijack the COM CLSID registration used by C...