Malicious code in kickass-component-library (npm)

The package kickass-component-library was found to contain malicious code...

Malicious code in ideainvest-component-library (npm)

The package ideainvest-component-library was found to contain malicious code...

MAL-2025-22959 Malicious code in ideainvest-component-library (npm)

The package ideainvest-component-library was found to contain malicious code...

Malicious code in tools-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8430b3270cb2769c8afa5686cc7ed09d5be1fe3a5d680fd3887e3b2a1279e3f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-44148

Cross Site Scripting XSS vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code via the failure.aspx component...

CVE-2024-40462

An issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the SETTINGSVATIGATOR.EXE component...

CVE-2024-40461

An issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the STOCKORDERENTRY.EXE component...

Malicious code in trueye-component-library (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4201 Malicious code in trueye-component-library (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2017-20157

A vulnerability was found in Ariadne Component Library up to 2.x. It has been classified as critical. Affected is an unknown function of the file src/url/Url.php. The manipulation leads to server-side request forgery. Upgrading to version 3.0 is able to address this issue. It is recommended to...

@apolitical/component-library (>=1.7.0-beta.1, <=10.5.0), @apolitical/styleguide2 (>=3.17.0-rc.1, <=7.8.1) +60 more potentially affected by CVE-2024-21535 via markdown-to-jsx (>=7.0.0, <=7.3.2)

markdown-to-jsx NPM version =7.0.0, =1.7.0-beta.1, =3.17.0-rc.1, =1.0.6, =0.0.0-AddSnapshotPipeline-20240326102812, =6.1.1, =7.3.2, =0.1.0, =0.9.1, =1.0.12, =3.32.0-rc.2, =9.0.0-next.47, =0.1.0-alpha.39, =1.1.1-beta.3, =1.2.2 and more Source cves: CVE-2024-21535 Source advisory:...

Malicious code in syf-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aaf53164384bcbeeceafc8ee843317d9daac2a3f5fe99a0692b9f572f3fead3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7986 Malicious code in syf-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aaf53164384bcbeeceafc8ee843317d9daac2a3f5fe99a0692b9f572f3fead3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @the-platform-group/component-library (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2010 Malicious code in @the-platform-group/component-library (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in melichat-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1d7d152708054848a62109924487b7dcacac50e054b19a8682b3b0b26b279e6b The OpenSSF Package Analysis project identified 'melichat-component-library' @ 1.1.0 npm as malicious. It is considered malicious because: - The...

Malicious code in xweb_3.0_component_lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f6b7e56dbb18ea6a0d7b22a4334b7303140d6c041322360074890df204e941a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2022-44368

NASM v2.16 was discovered to contain a null pointer deference in the NASM component...

CVE-2023-23074

Cross site scripting XSS vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via embedding videos in the language component...

GHSA-QR97-V87P-X965 Ariadne Component Library vulnerable to Server-Side Request Forgery

A vulnerability was found in Ariadne Component Library up to 2.x. It has been classified as critical. Affected is an unknown function of the file src/url/Url.php. The manipulation leads to server-side request forgery. Upgrading to version 3.0 can address this issue. It is recommended to upgrade t...