13 matches found
simvyn
simvyn Herramienta universal de desarrollo móvil — controla simuladores iOS, emuladores Android y dispositivos reales desde un único panel y CLI Tabla de Contenidos Inicio Rápido Instalación Agentes de Codificación con IA Características Demostraciones de Módulos Guía de Colecciones Referencia de...
Malicious Package
Overview @hrmony/devtool-configuration is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious code in @hrmony/devtool-configuration (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f83cb569df9c47639ee0fd16c34a4ac1b97b89733b1b468389d8032087ab233b On import, index.js performs an unconditional POST beacon to https://hrnmn.dd.h4x.tv/saveinstanceinfofrompkgehrmonydevtool-configuration, then querie...
MAL-2026-17260 Malicious code in @hrmony/devtool-configuration (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f83cb569df9c47639ee0fd16c34a4ac1b97b89733b1b468389d8032087ab233b On import, index.js performs an unconditional POST beacon to https://hrnmn.dd.h4x.tv/saveinstanceinfofrompkgehrmonydevtool-configuration, then querie...
simvyn v2.7.1
simvyn Universal mobile devtool — control iOS Simulators, Android Emulators, and real devices from a single dashboard and CLI Table of Contents Quick Start Installation AI Coding Agents Features Module Showcases Collections Guide CLI Reference How It Works Supported Platforms Contributing Securit...
Malicious Package
Overview redux-saga-devtool is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in redux-saga-devtool (npm)
The package redux-saga-devtool was found to contain malicious code...
MAL-2025-42066 Malicious code in redux-saga-devtool (npm)
The package redux-saga-devtool was found to contain malicious code...
@finsemble/finsemble-core (8.10.0-beta.1), @finsemble/finsemble-electron-adapter (8.10.0-beta.1) +3 more potentially affected by CVE-2023-5217 via electron (>=26.0.0, <=26.2.2)
electron NPM version =26.0.0, =0.3.0, =1.0.0-canary.0, =2.0.106, =2.0.111 Source cves: CVE-2023-5217 Source advisory: OSV:GHSA-QQVQ-6XGJ-JW8G...
Malicious code in shopify-devtool (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bf588145639b39e05763bc95249693461de81f172dd824722ba2519593cc78a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6100 Malicious code in shopify-devtool (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bf588145639b39e05763bc95249693461de81f172dd824722ba2519593cc78a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Reddit: XSS
hi security team i have found a XSS in old.reddit.com and in reddit.com Description: Cross-site scripting also known as XSS is a web security vulnerability that allows an attacker to compromise the interactions that users have with a vulnerable application. It allows an attacker to circumvent the...
OS Command Injection
firefox is vulnerable to command injection. The vulnerability exists as the Devtool's Copy as cURL feature did not fully escape website-controlled data, potentially leading to command injection...