Lucene search
+L

9 matches found

Snyk
Snyk
•added 2026/10/05 6:34 p.m.•10 views

Malicious Package

Overview css-display-reading-polyfill is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/10/05 6:30 a.m.•8 views

Malicious code in css-display-reading-polyfill (npm)

Source: amazon-inspector b397798b7209f1094c33dc3ed721d4a3ef0536065317bd06bae76e33dd505334 The package ships payload.bundle.min.js, which on load runs an IIFE that invokes childprocess.execSync to run id, whoami, and uname, collects os.hostname, node version, process.platform, and pid, and transmi...

6AI score
SaveExploits0References3Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/10/05 3:35 a.m.•29 views

Malicious code in css-display-reading-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b397798b7209f1094c33dc3ed721d4a3ef0536065317bd06bae76e33dd505334 The package ships payload.bundle.min.js, which on load runs an IIFE that invokes childprocess.execSync to run id, whoami, and uname, collects...

6AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/10/05 3:35 a.m.•20 views

MAL-2026-17549 Malicious code in css-display-reading-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b397798b7209f1094c33dc3ed721d4a3ef0536065317bd06bae76e33dd505334 The package ships payload.bundle.min.js, which on load runs an IIFE that invokes childprocess.execSync to run id, whoami, and uname, collects...

6AI score
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2023/02/15 6:01 a.m.•10 views

SUSE CVE-2010-0053

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to the run-in Cascading Style Sheets CSS display property...

9.3CVSS7.8AI score0.0605EPSS
SaveExploits0References4
Securelist
Securelist
•added 2023/02/07 8:00 a.m.•46 views

Web beacons on websites and in e-mail

There is a vast number of trackers, which gather information about users activities online. For all intents and purposes, we have grown accustomed to online service providers, marketing agencies, and analytical companies tracking our every mouse click, our social posts, browser and streaming...

SaveExploits0
Prion
Prion
•added 2010/03/15 2:15 p.m.•23 views

Design/Logic Flaw

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to the run-in Cascading Style Sheets CSS display property...

9.3CVSS7.9AI score0.0605EPSS
SaveExploits0References19Affected Software1
Cvelist
Cvelist
•added 2010/03/12 9:00 p.m.•39 views

CVE-2010-0053

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to the run-in Cascading Style Sheets CSS display property...

8.7AI score0.0605EPSS
SaveExploits0References19
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/03/12 12:00 a.m.•11 views

CVE-2010-0053: Undefined Security Weakness

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to the run-in Cascading Style Sheets CSS display property...

9.3CVSS6.7AI score0.0605EPSS
SaveExploits0References2
Rows per page
Query Builder