MAL-2025-1246 Malicious code in growthbook-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c737e188f198e2f774debc152e35106477be618741ecc8afc62df2b72b9d0323 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1250 Malicious code in internallib_v666 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9638a514e7e2d6283a828ccb3fb9513c6ff53de16da5291b024f5465fff3c788 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1258 Malicious code in react-scripts-win (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29e804e3b477f180aba3ed9674d889a1e235e2091cca2fd2fe31cd5ef7528978 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1245 Malicious code in fluencelabs.github.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c3788072d85296aa9c456499d5d0923967e28690fd1f3dc6d3fb8e00c2ee33a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-56061

Missing Authorization vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Privilege Escalation.This issue affects RepairBuddy: from n/a through = 3.8119...

CVE-2024-51793

Unrestricted Upload of File with Dangerous Type vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Upload a Web Shell to a Web Server.This issue affects RepairBuddy: from n/a through = 3.8115...

Malicious code in k6-docs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d7cb564097694bf695333aae5e27e5a57cf646842369831d93bfad2391e9309 Any computer that has this package installed or running should be considered...

Malicious code in pages-proxy (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e215918f5cc85a894233afe08ebb076c28300732fbfd5f8be0aab954b5e455bb Any computer that has this package installed or running should be considered...

CVE-2024-38414

CVE-2024-38414 affects Qualcomm chipsets. The issue is information disclosure that occurs while processing firmware image information during core initialization, indicating a confidentiality impact. CVSS metrics in the entry show a high confidentiality impact (C/H) with local attack vector and lo...

CVE-2024-38413 Improper Input Validation in Computer Vision

Memory corruption while processing frame packets...

CVE-2024-38413

CVE-2024-38413 affects Qualcomm chipsets; memory corruption occurs while processing frame packets due to insufficient input validation in Qualcomm’s embedded software, specifically in msm/eva/msm cvp buf.c and msm/eva/msm cvp.c. The issue is mapped to a partial/low exposure vector with potential ...

CVE-2024-38413 Improper Input Validation in Computer Vision

Memory corruption while processing frame packets...

CVE-2024-38411 Use After Free in Computer Vision

Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls...

CVE-2024-38411 Use After Free in Computer Vision

Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls...

Malicious code in lge-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50473c9040c0e421b0ed196c99328de623d76a92ca2a5585abbb9e95c71e33c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in type-on-strap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb7c3c0201aafc369ec9ca67cd6610fafdf472d7be2ea007f687c0cdc3e9e62f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1160 Malicious code in paypal-js-advanced-integration-ib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3b3d606a46036e08dc78fd5e2e8fe3694d1607d120c062343a2868294d3c9c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1144 Malicious code in lge-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50473c9040c0e421b0ed196c99328de623d76a92ca2a5585abbb9e95c71e33c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zapier-shops-orders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a081d17e6a916052da5d5af10b083f443f0713f3a687feb4186d21737b7c74b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fastlane_paypal_video_project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbac686e7f68e9b8765ef6dfde034e191e47cb639a2ccc0e2535e8ef61c522e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...