1017 matches found
Malicious code in cross-env-html-webpack-plugin-writable-dactyl (npm)
The package cross-env-html-webpack-plugin-writable-dactyl was found to contain malicious code...
MAL-2025-43910 Malicious code in cross-env-html-webpack-plugin-writable-dactyl (npm)
The package cross-env-html-webpack-plugin-writable-dactyl was found to contain malicious code...
Malicious code in elektra-cross-env-deimos-ganymede (npm)
The package elektra-cross-env-deimos-ganymede was found to contain malicious code...
Malicious code in convict-fomalhaut-morgan-cross-env (npm)
The package convict-fomalhaut-morgan-cross-env was found to contain malicious code...
MAL-2025-43911 Malicious code in cross-env-proteomics-superposition-geomorphology (npm)
The package cross-env-proteomics-superposition-geomorphology was found to contain malicious code...
Security Bulletin: IBM Cognos Dashboards on Cloud Pak for Data has addressed security vulnerabilities.
Summary There are vulnerabilities in IBM® Semeru Runtime and Open-Source Software OSS components consumed by IBM Cognos Dashboards on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2025-25193 DESCRIPTION: Netty, an asynchronous, event-driven network application framework, has a vulnerability...
Malicious code in import-license-checker (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 c41ca4c8119fa20f7f5915b34de59f879b77fedf237cbbf5a69e46ddbeded428 Package exfiltrates content of .env files to a remote target --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
Linux Distros Unpatched Vulnerability : CVE-2019-16228
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in py-lmdb 0.97. There is a divide-by-zero error in the function mdbenvopen2 if mdbenvreadheader obtains a zero value for a certain size...
Remote Code Execution (RCE)
Overview picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Remote Code Execution RCE due to the use of torch.utils.collectenv.run in the reduce method. An attacker can execute arbitrary code by crafting...
MAL-2025-41355 Malicious code in @navify-platform/env (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
CVE-2025-57754 eslint-ban-moment exposed a sensitive Supabase URI in .env (Credential leak)
eslint-ban-moment is an Eslint plugin for final assignment in VIHU. In 3.0.0 and earlier, a sensitive Supabase URI is exposed in .env. A valid Supabase URI with embedded username and password will allow an attacker complete unauthorized access and control over database and user data. This could...
eslint-ban-moment 安全漏洞
eslint-ban-moment is an application by the individual developer Kristófer Fannar Björnsson. A security vulnerability exists in eslint-ban-moment 3.0.0 and earlier versions, which originates from the exposure of sensitive Supabase URIs in .env files, which could lead to data exfiltration,...
Malicious code in subscription-cross-env-dione-protractor (npm)
The package subscription-cross-env-dione-protractor was found to contain malicious code...
Malicious code in cross-env-wormhole-passport-regulus (npm)
The package cross-env-wormhole-passport-regulus was found to contain malicious code...
Malicious code in callback-cross-env-technosignature-ganymede (npm)
The package callback-cross-env-technosignature-ganymede was found to contain malicious code...
Malicious code in cross-env-xanthus-luminescence-lyra (npm)
The package cross-env-xanthus-luminescence-lyra was found to contain malicious code...
Malicious code in cross-env-relay-commitlint-config-angular-configstore (npm)
The package cross-env-relay-commitlint-config-angular-configstore was found to contain malicious code...
Malicious code in funbox-frontend-env-angular (npm)
The package funbox-frontend-env-angular was found to contain malicious code...