2 matches found
Malicious code in @nx/enterprise-cloud (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b11cb4be7497510402676b2b593e6a5d3e0dee4e1443996403e8aa496f284f3 Summary Malicious versions of the nx package, as well as some supporting plugin packages, were published to npm, containing code that scans the file...
9.6CVSS6.1AI score0.00527EPSS
SaveExploits0References17
PT-2025-11694
Name of the Vulnerable Software and Affected Versions reviewdog/action-setup version 1 Description The GitHub Action reviewdog/action-setup was compromised between March 11, 2025, 18:42 and 20:31 UTC with malicious code. This code dumps exposed secrets to GitHub Actions Workflow Logs. Actions tha...
8.6CVSS7.4AI score0.02296EPSS
SaveExploits2References183
20