Malicious code in vuepress-cosmicray-cypress-puppeteer (npm)

The package vuepress-cosmicray-cypress-puppeteer was found to contain malicious code...

Malicious code in cypress-pm2-wormhole-quark (npm)

The package cypress-pm2-wormhole-quark was found to contain malicious code...

Malicious code in cypress-yakutsk-transhumanism-umbra (npm)

The package cypress-yakutsk-transhumanism-umbra was found to contain malicious code...

Malicious code in graphql-jest-cypress-build (npm)

The package graphql-jest-cypress-build was found to contain malicious code...

Malicious code in cypress-graphql (npm)

The package cypress-graphql was found to contain malicious code...

MAL-2025-26074 Malicious code in mdx-geckodriver-cypress-levels (npm)

The package mdx-geckodriver-cypress-levels was found to contain malicious code...

MAL-2025-17422 Malicious code in commitlint-unuk-cypress-xml (npm)

The package commitlint-unuk-cypress-xml was found to contain malicious code...

MAL-2025-17897 Malicious code in cypress-pm2-wormhole-quark (npm)

The package cypress-pm2-wormhole-quark was found to contain malicious code...

MAL-2025-39331 Malicious code in winston-paleomagnetism-redis-cypress (npm)

The package winston-paleomagnetism-redis-cypress was found to contain malicious code...

MAL-2025-17899 Malicious code in cypress-yakutsk-transhumanism-umbra (npm)

The package cypress-yakutsk-transhumanism-umbra was found to contain malicious code...

MAL-2025-23723 Malicious code in jekyll-cypress-exobiology-miranda (npm)

The package jekyll-cypress-exobiology-miranda was found to contain malicious code...

MAL-2025-17896 Malicious code in cypress-node-config-phoebe-framework (npm)

The package cypress-node-config-phoebe-framework was found to contain malicious code...

CVE-2025-44557

A state machine transition flaw in the Bluetooth Low Energy BLE stack of Cypress PSoC4 v3.66 allows attackers to bypass the pairing process and authentication via a crafted pairingfailed packet...

CVE-2025-44557

A state machine transition flaw in the Bluetooth Low Energy BLE stack of Cypress PSoC4 v3.66 allows attackers to bypass the pairing process and authentication via a crafted pairingfailed packet...

PT-2025-27241 · Cypress · Cypress Psoc4

Name of the Vulnerable Software and Affected Versions: Cypress PSoC4 version 3.66 Description: A state machine transition flaw in the Bluetooth Low Energy BLE stack allows attackers to bypass the pairing process and authentication via a crafted pairing failed packet. This flaw enables attackers t...

CVE-2025-44557

A state machine transition flaw in the Bluetooth Low Energy BLE stack of Cypress PSoC4 v3.66 allows attackers to bypass the pairing process and authentication via a crafted pairingfailed packet...

CVE-2024-48289

An issue in the Bluetooth Low Energy implementation of Cypress Bluetooth SDK v3.66 allows attackers to cause a Denial of Service DoS via supplying a crafted LLPAUSEENCREQ packet...

CVE-2023-38695

cypress-image-snapshot shows visual regressions in Cypress with jest-image-snapshot. Prior to version 8.0.2, it's possible for a user to pass a relative file path for the snapshot name and reach outside of the project directory into the machine running the test. This issue has been patched in...

CVE-2023-47415

Cypress Solutions CTM-200 v2.7.1.5600 and below was discovered to contain an OS command injection vulnerability via the clitext parameter...

CVE-2021-34147

The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 does not properly handle the reception of a malformed LMP timing accuracy response followed by multiple reconnections to the link slave, allowing attackers to exhaust device BT resources and eventually...