Astra Linux – Vulnerability in Firefox and Thunderbird

A website could have obscured the fullscreen notification by using a dropdown select input element. This could have caused user confusion and potentially led to spoofing attacks. This vulnerability affects Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8...

MAL-2025-42051 Malicious code in paper-dropdown-input (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2f60c41c2f87fe82386507e3f611946e4d7b12f970168662d0532b831a12d254 The OpenSSF Package Analysis project identified 'paper-dropdown-input...

Malicious code in paper-dropdown-input (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2f60c41c2f87fe82386507e3f611946e4d7b12f970168662d0532b831a12d254 The OpenSSF Package Analysis project identified 'paper-dropdown-input...

SUSE CVE-2024-1548

A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8...

DEBIAN-CVE-2024-1548

A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8...

MAL-2023-8622 Malicious code in dropdown-input (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2d336f300d1cbb10697762ccb19e2efa75d88c7a9f180ca4e472b6861b6d5ca0 The OpenSSF Package Analysis project identified 'dropdown-input' @ 3.4.15 npm as malicious. It is considered malicious because: - The package...

Malicious code in dropdown-input (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2d336f300d1cbb10697762ccb19e2efa75d88c7a9f180ca4e472b6861b6d5ca0 The OpenSSF Package Analysis project identified 'dropdown-input' @ 3.4.15 npm as malicious. It is considered malicious because: - The package...