Lucene search
+L

40118 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/02 11:17 a.m.•40 views

Malicious code in tailwind-theme-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3a6ff1f2699ab0ea92a30416c4b043d70781bd4c7241c2fb497061a78866ab7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.6AI score
SaveExploits0References8
osv_mal
osv_mal
•added 2026/09/02 11:17 a.m.•22 views

MAL-2026-15846 Malicious code in tailwind-theme-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3a6ff1f2699ab0ea92a30416c4b043d70781bd4c7241c2fb497061a78866ab7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.7AI score
SaveExploits0References8
Github Security Blog
Github Security Blog
•added 2026/09/02 11:17 a.m.•4 views

Malware in tailwind-theme-engine

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Snyk
Snyk
•added 2026/09/02 11:17 a.m.•13 views

Malicious Package

Overview arif-tempe11-sluey is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/02 11:17 a.m.•11 views

Malicious Package

Overview arrogantpeafowlz3n is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/02 11:17 a.m.•17 views

Malicious Package

Overview bella-kupang97-riris is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/02 11:17 a.m.•16 views

Malicious Package

Overview arrogant-plum-goldfish is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/02 11:17 a.m.•13 views

Malicious Package

Overview arrogantbutterflyz3n is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/02 11:17 a.m.•16 views

Malicious Package

Overview tailwind-theme-engine is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/02 11:17 a.m.•12 views

Malicious Package

Overview bella-bakwan70-ruro is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/02 11:17 a.m.•13 views

Malicious Package

Overview arif-telurtahu39-ruro is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/02 11:17 a.m.•15 views

Malicious Package

Overview aril-55 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/02 11:17 a.m.•13 views

Malicious Package

Overview arif-ronde76-sukiwir is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/02 11:17 a.m.•14 views

Malicious Package

Overview arrogantplanarianz3n is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/02 11:17 a.m.•20 views

Malicious Package

Overview bella-lapis74-miaww is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/02 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-84326

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML...

8.8CVSS8.1AI score0.00499EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/09/02 12:00 a.m.•23 views

CVE-2026-84326

Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.5AI score0.00499EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/02 12:00 a.m.•9 views

CVE-2026-81571: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The Brave WordPress plugin before 0.8.8 does not prevent a URL parameter used to pre-fill a form field from being passed to WordPress's shortcode engine, allowing unauthenticated attackers to have arbitrary shortcodes registered on the site executed server-side...

4.8CVSS5.7AI score0.00243EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/09/02 12:00 a.m.•26 views

Google Chrome V8 DoS

The V8 JavaScript script handler vulnerability in Google Chrome is related to improper code generation management. Exploitation of this vulnerability allows a remote attacker to cause a denial of service by using a specially crafted HTML page...

10CVSS7.8AI score0.00483EPSS
SaveExploits0References9Affected Software4
vulnersOsv
vulnersOsv
•added 2026/09/01 9:28 p.m.•5 views

fair-llm (>=0.2.0, <=0.6.2), geo-importer (>=0.0.1b1, <=0.0.1b914) +4 more potentially affected by CVE-2026-84310 via pypdf (5.6.0)

pypdf PYPI version 5.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - fair-llm =0.2.0, =0.0.1b1, =30.0.5, =30.0.7 - textspitter 0.4.0b0 Source cves: CVE-2026-84310 Source advisory: OSV:GHSA-23W6-3W8W-8484...

4.8CVSS5.4AI score0.00135EPSS
SaveExploits0
Rows per page
Query Builder