Lucene search
+L

2 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/27 4:42 p.m.5 views

Malicious code in @nx/enterprise-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b11cb4be7497510402676b2b593e6a5d3e0dee4e1443996403e8aa496f284f3 Summary Malicious versions of the nx package, as well as some supporting plugin packages, were published to npm, containing code that scans the file...

9.6CVSS6.1AI score0.00527EPSS
SaveExploits0References17
Positive Technologies
Positive Technologies
added 2025/03/12 12:0 a.m.6 views

PT-2025-11694

Name of the Vulnerable Software and Affected Versions reviewdog/action-setup version 1 Description The GitHub Action reviewdog/action-setup was compromised between March 11, 2025, 18:42 and 20:31 UTC with malicious code. This code dumps exposed secrets to GitHub Actions Workflow Logs. Actions tha...

8.6CVSS7.4AI score0.02296EPSS
SaveExploits2References183
Rows per page
Query Builder