Malicious code in client-hooks-eslint-es6 (npm)

The package client-hooks-eslint-es6 was found to contain malicious code...

MAL-2025-19811 Malicious code in es6-demo-react-npm2 (npm)

The package es6-demo-react-npm2 was found to contain malicious code...

Malicious code in eslint-config-googlejs-es6 (npm)

The package eslint-config-googlejs-es6 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 8940b7796dc2789fa52ad6b2bff9f902eabc3c074e0146ffa0bf81789cc1d365 This package installs a dependency hosted on a custom domain...

MAL-2025-19813 Malicious code in es6-prmoise (npm)

The package es6-prmoise was found to contain malicious code...

MAL-2025-17150 Malicious code in closure-es6 (npm)

The package closure-es6 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security e0574a10de5b6d2bca40b32e3869d3a497db2729667e3523f97b8dde3f5846c7 This package installs a dependency hosted on a custom domain that runs an inf...

Malicious code in es6-http-status-codes (npm)

The package es6-http-status-codes was found to contain malicious code...

Malicious code in closure-es6 (npm)

The package closure-es6 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security e0574a10de5b6d2bca40b32e3869d3a497db2729667e3523f97b8dde3f5846c7 This package installs a dependency hosted on a custom domain that runs an inf...

MAL-2025-5514 Malicious code in os-info-es6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5db90325052a54f4806fa3551b5830ecb62ee7544dff34a58a48549719bf266 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5404 Malicious code in es6-module-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ba0c43a1f7b9408d4c635c3862281a3d3c970336ed789bd8a02920546e626da Any computer that has this package installed or running should be considered...

Malicious code in os-info-checker-es6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7d48d1ef01f6c43c34237496128c5593e34836a51db6b931a38f9d1520562c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4013 Malicious code in os-info-checker-es6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7d48d1ef01f6c43c34237496128c5593e34836a51db6b931a38f9d1520562c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in k6-es6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9283bea57aa9a22d9519e64d8cc610d3f2bb793709fadccbf94036a797d9ca58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1137 Malicious code in k6-es6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9283bea57aa9a22d9519e64d8cc610d3f2bb793709fadccbf94036a797d9ca58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RHCOS 4 / 9 : OpenShift Container Platform 4.13.3 (RHSA-2023:3536)

The remote Red Hat Enterprise Linux CoreOS 4 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3536 advisory. - golang: net/http, net/textproto: denial of service from excessive memory allocation CVE-2023-24534 - golang: net/http,...

MAL-2024-33 Malicious code in d5-es6-sass-boilerplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3090df994b516cfc30ee58cc5871282f61ebc4e378a73744fb779705e16a1a35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-48225

Laf is a cloud development platform. Prior to version 1.0.0-beta.13, the control of LAF app enV is not strict enough, and in certain scenarios of privatization environment, it may lead to sensitive information leakage in secret and configmap. In ES6 syntax, if an obj directly references another...

CVE-2023-48225 Laf env causes sensitive information disclosure

Laf is a cloud development platform. Prior to version 1.0.0-beta.13, the control of LAF app enV is not strict enough, and in certain scenarios of privatization environment, it may lead to sensitive information leakage in secret and configmap. In ES6 syntax, if an obj directly references another...

CVE-2023-29453 Agent 2 package are built with Go version affected by CVE-2023-24538

Templates do not properly consider backticks as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to...

FreeBSD : Grafana -- Critical vulnerability in golang (0b85b1cd-e468-11ed-834b-6c3be5272acd)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0b85b1cd-e468-11ed-834b-6c3be5272acd advisory. - Templates do not properly consider backticks as Javascript string delimiters, and do not escape them ...

CVE-2023-24538

Templates do not properly consider backticks as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to...