3038 matches found
MAL-2025-22212 Malicious code in hardhat-contract-deploy (npm)
The package hardhat-contract-deploy was found to contain malicious code...
MAL-2025-7060 Malicious code in @amber-team/log-uptime-deploy (npm)
The package @amber-team/log-uptime-deploy was found to contain malicious code...
MAL-2025-28218 Malicious code in omicron-deploy-index-bad-sun (npm)
The package omicron-deploy-index-bad-sun was found to contain malicious code...
Malicious code in deploy-benchmark-fork-bundle-dog (npm)
The package deploy-benchmark-fork-bundle-dog was found to contain malicious code...
MAL-2025-15778 Malicious code in blaast-deploy (npm)
The package blaast-deploy was found to contain malicious code...
MAL-2025-27876 Malicious code in nu-deploy-sigma-mu-grid (npm)
The package nu-deploy-sigma-mu-grid was found to contain malicious code...
MAL-2025-14183 Malicious code in air-deploy-air-stub-bash (npm)
The package air-deploy-air-stub-bash was found to contain malicious code...
MAL-2025-19190 Malicious code in ecosia-deploy (npm)
The package ecosia-deploy was found to contain malicious code...
MAL-2025-29678 Malicious code in process-alpha-deploy-cron-array (npm)
The package process-alpha-deploy-cron-array was found to contain malicious code...
MAL-2025-19091 Malicious code in easy-zero-gamma-promise-deploy (npm)
The package easy-zero-gamma-promise-deploy was found to contain malicious code...
MAL-2025-7053 Malicious code in @amber-team/deploy-to-mailer (npm)
The package @amber-team/deploy-to-mailer was found to contain malicious code...
MAL-2025-27418 Malicious code in nf-deploy (npm)
The package nf-deploy was found to contain malicious code...
MAL-2025-18293 Malicious code in deploy-assert-debug-short-reject (npm)
The package deploy-assert-debug-short-reject was found to contain malicious code...
MAL-2025-33442 Malicious code in small-private-integer-array-deploy (npm)
The package small-private-integer-array-deploy was found to contain malicious code...
MAL-2025-7940 Malicious code in @frozen-team/deploy-log (npm)
The package @frozen-team/deploy-log was found to contain malicious code...
CVE-2025-53772
Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network...
GHSA-X6GV-2RVH-QMP6 m00nl1ght-dev/steam-workshop-deploy: Exposure of Version-Control Repository to an Unauthorized Control Sphere and Insufficiently Protected Credentials
Summary The steam-workshop-deploy github action does not exclude the .git directory when packaging content for deployment and provides no built-in way to do so. If a .git folder exists in the target directory e.g., due to a local Git repo, custom project structure, or via the actions/checkout...
CVE-2025-8916
Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All API modules, Legion of the Bouncy Castle Inc. BC Java bcprov on All API modules, Legion of the Bouncy Castle Inc. BCPKIX FIPS bcpkix-fips on All API modules allows Excessiv...
Vulnerabilities fixed in Microsoft Developer Tools
Microsoft has fixed vulnerabilities in Web Deploy. The vulnerability in Web Deploy results from the deserialization of untrusted data. This issue can be exploited by an authorized attacker, enabling them to remotely execute code on the affected system. Web Deploy:...
