Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query

Summary The contents of arbitrary files can be returned to the browser. Impact Only apps explicitly exposing the Vite dev server to the network using --host or server.host config option are affected. Details - base64 encoded content of non-allowed files is exposed using ?inline&import originally...

MAL-2025-3436 Malicious code in bitcoinlib-dev (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a198ee5e2df9c67dcbd24ed19a8fec5d462bbb3c0eb474cf00cd299e75074ef5 It overwrites the 'clw' command from legit bitconinlib package and attempts to exfiltrate its database on the usage. As a context, it appears to be created to...

Malicious code in tapbit-dev (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2901 Malicious code in tapbit-dev (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in hibt-dev (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2881 Malicious code in hibt-dev (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in coincheck-dev (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2868 Malicious code in coincheck-dev (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2861 Malicious code in bvox-dev (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in bvox-dev (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2855 Malicious code in bitvavo-dev (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in bitvavo-dev (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in bitunix-dev (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2851 Malicious code in bitunix-dev (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2847 Malicious code in bitrue-dev (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in bitrue-dev (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in bifinance-dev (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2842 Malicious code in bifinance-dev (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in azbit-dev (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2838 Malicious code in azbit-dev (npm)

--- -= Per source details. Do not edit below this line.=-...