Lucene search
+L

18906 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/24 10:20 p.m.•14 views

Malicious code in next-styled-nprogress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73288a3937c0b6e5fe20c011142795ae2f436252a77e2ab6b24dabcdb9ab7dd5 The package next-styled-nprogress was found to contain malicious code. Source: ghsa-malware...

6.9AI score
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/24 10:19 p.m.•21 views

Malicious code in react-component-taggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b49756f82524cc17df7c04f674e36e56cb9c0f20a095b38dc9297e70440d73 The package react-component-taggers was found to contain malicious code. Source: ghsa-malware...

6.9AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2025/11/24 10:19 p.m.•5 views

Malware in next-simple-google-analytics

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2025/11/24 10:13 p.m.•6 views

Malware in @posthog/drop-events-on-property-plugin

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2025/11/24 10:11 p.m.•6 views

Malware in @posthog/clickhouse

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2025/11/24 10:05 p.m.•6 views

Malware in react-native-websocket

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/24 10:01 p.m.•14 views

Malicious code in itobuz-angular-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afed61db59aa59cee728d1b2cbe413a85ae32a192004efad9e9d126770433bdf The package itobuz-angular-auth was found to contain malicious code. Source: ghsa-malware...

6.9AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2025/11/24 9:56 p.m.•5 views

Malware in hope-mapboxdraw

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/24 9:50 p.m.•16 views

Malicious code in orchestrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 732fc5c54ff5b647980dececa3d55359ca48b380f00beb4845ddfbcc9c968af4 The package orchestrix was found to contain malicious code. Source: ghsa-malware 68b12d5467e82141efec319259cd3c7331cd739fef7932534ebdf9692980ab74 Any...

6.9AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2025/11/24 9:45 p.m.•5 views

Malware in email-deliverability-tester

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2025/11/24 9:44 p.m.•4 views

Malware in docusaurus-plugin-vanilla-extract

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/24 9:36 p.m.•18 views

Malicious code in set-nested-prop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e3ace4ffb79a5de4b7a82ae75ffdcccb6233dce2bfa2a4f32f70a3dc6921a03 The package set-nested-prop was found to contain malicious code. Source: ghsa-malware 35b0b9a8f67ec13668f93a14f45e037dc7cb3c33fa4c688e13b10a3cd2c5d3a...

6.9AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2025/11/24 9:35 p.m.•4 views

Malware in sort-by-distance

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2025/11/24 9:29 p.m.•5 views

Malware in tanstack-shadcn-table

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2025/11/24 9:28 p.m.•5 views

Malware in tcsp-draw-test

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/24 9:05 p.m.•17 views

Malicious code in uplandui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f9a52e37653e2c0d85c55db9f1173d503391434bb0a2667b8ae8e57f1ed92b The package uplandui was found to contain malicious code. Source: ghsa-malware e26bf91e39b976ff5aa4107bd8140380fdceeb1de6c12a9fd9993d1ff16642aa Any...

6.9AI score
SaveExploits0References9
Github Security Blog
Github Security Blog
•added 2025/11/24 9:04 p.m.•5 views

Malware in upload-to-play-store

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2025/11/24 5:06 p.m.•5 views

Malware in @ensdomains/ccip-read-cf-worker

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/24 5:02 p.m.•25 views

Malicious code in @ensdomains/ens-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dee805b6610ec644c5edb2b73ca1d1da2119bb3280f182e716cfdd0aa31720fb The package @ensdomains/ens-contracts was found to contain malicious code. Source: ghsa-malware...

6.9AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2025/11/24 5:02 p.m.•4 views

Malware in @ensdomains/ens-contracts

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder