13006 matches found
Malicious code in pentest-event-emitter (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6951 Malicious code in pydantic-settings (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in epc-node-web-client (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in com.microsoft.mixedreality.webrtc (npm)
The package com.microsoft.mixedreality.webrtc was found to contain malicious code...
MAL-2025-27266 Malicious code in neev-communication (npm)
The package neev-communication was found to contain malicious code...
MAL-2025-9142 Malicious code in @omisepayments/in-app-communication-graphql-sdk (npm)
The package @omisepayments/in-app-communication-graphql-sdk was found to contain malicious code...
Malicious code in neev-communication (npm)
The package neev-communication was found to contain malicious code...
CVE-2025-48807
Improper restriction of communication channel to intended endpoints in Windows Hyper-V allows an authorized attacker to execute code locally...
CVE-2024-54678
A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions, SIMATIC PCS neo V5.0 All versions, SIMATIC PCS neo V6.0 All versions V6.0 SP1 Update 1, SIMATIC S7-PLCSIM V17 All versions, SIMATIC STEP 7 V17 All versions V17 Update 9, SIMATIC STEP 7 V18 All versions, SIMATIC STEP 7 V19 A...
CVE-2025-42946
Due to directory traversal vulnerability in SAP S/4HANA Bank Communication Management, an attacker with high privileges and access to a specific transaction and method in Bank Communication Management could gain unauthorized access to sensitive operating system files. This could allow the attacke...
MAL-2025-6865 Malicious code in azure-documentdb-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6ae212af083dc32114fe6584d59ab57ac5b5c3b77d59d83cd62af05f8706cdf0 The OpenSSF Package Analysis project identified 'azure-documentdb-node' @ 9.9.9 npm as malicious. It is considered malicious because: - The...
Malicious code in azure-documentdb-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6ae212af083dc32114fe6584d59ab57ac5b5c3b77d59d83cd62af05f8706cdf0 The OpenSSF Package Analysis project identified 'azure-documentdb-node' @ 9.9.9 npm as malicious. It is considered malicious because: - The...
Malicious code in dagger-core (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0d58316229ef10836cd767174ee076e5fc92d8e4cf13f52b4b4950853503434a The OpenSSF Package Analysis project identified 'dagger-core' @ 13.8....
Malicious code in com.microsoft.mrtk.graphicstools.shadergraph.unity (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6906 Malicious code in @mobile-sdk/videoads-ad-video-player-html5 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
CVE-2025-8761 INSTAR 2K+/4K Backend IPC Server denial of service
A vulnerability has been found in INSTAR 2K+ and 4K 3.11.1 Build 1124. This vulnerability affects unknown code of the component Backend IPC Server. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...
CVE-2025-8761 INSTAR 2K+/4K Backend IPC Server denial of service
A vulnerability has been found in INSTAR 2K+ and 4K 3.11.1 Build 1124. This vulnerability affects unknown code of the component Backend IPC Server. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...
MAL-2025-6891 Malicious code in signup-ui-lego-core (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 63d83acde52ca36693d2c4274687d70b0758d12141ee41ae8a97bb6e9267b983 The OpenSSF Package Analysis project identified 'signup-ui-lego-core'...