165 matches found
MAL-2026-17670 Malicious code in @itsmee_aizat.id/baileys2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95f98902ced2f03261621ba4cb5386a892bf31ac4510b916708d3d3eb21aa50 package.json declares "libsignal": "github:tenka-san/libsignal-node" as a runtime dependency. The source is a GitHub user account unrelated to the...
Malicious code in pycolorom (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 6babcee81c12759b66be4c0a8ba33c3f0272b052a47fda31227f4a6087ba8e5b The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...
EUVD-2020-10675
Malware in sbrugna...
EUVD-2020-10674
Malware in sbrugna...
EUVD-2020-10676
Malware in sbrugna...
EUVD-2020-10673
Malware in sbrugna...
EUVD-2020-10671
Malware in sbrugna...
EUVD-2020-10670
Malware in sbrugna...
EUVD-2005-3002
Malware in sbrugna...
Malware in vite-tsconfig-assistant
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
EUVD-2025-18191
Malicious code in bioql PyPI...
Malware in @ui-ux-gang/devextreme-rpk
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2025-49192
The web application is vulnerable to clickjacking attacks. The site can be embedded into another frame, allowing an attacker to trick a user into clicking on something different from what the user perceives. This could potentially reveal confidential information or allow others to take control of...
CVE-2025-49192: Improper Restriction of Rendered UI Layers or Frames
The web application is vulnerable to clickjacking attacks. The site can be embedded into another frame, allowing an attacker to trick a user into clicking on something different from what the user perceives. This could potentially reveal confidential information or allow others to take control of...
Malware in com.unity.furioos-connection-kit
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in com.unity.xr-line-renderer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 688c31fe545231e784aa21aa3349d80f9a04b02f893a52510f1be2216609f80f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2020-18753
An issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to gain access to the system and escalate privileges via a crafted packet...
CVE-2020-18759
An information disclosure vulnerability exists in the EPA protocol of Dut Computer Control Engineering Co.'s PLC MAC1100...