Malicious code in fittxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c57d0df6ffd72d43e267f4cb6f900055e9c3497d3b812a200bcaccf0356d762b The package fittxt was found to contain malicious code. Source: ghsa-malware 1dadb9e87da9f569b318ce6dd9a3a17eba4970fc2ac296d5ddd6f8515a5b3609 Any...

Malicious code in @actbase/react-native-kakao-navi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36d15c71a449d1035dde1e2271d10ec03380984f3d4e8f520200fdd5c6da864 The package @actbase/react-native-kakao-navi was found to contain malicious code. Source: ghsa-malware...

Malicious code in @actbase/css-to-react-native-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19bb30e7704436db9e7ac671839931de450cdcde7408b8c151337c6958433836 The package @actbase/css-to-react-native-transform was found to contain malicious code. Source: ghsa-malware...

Malicious code in @asyncapi/java-spring-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bb0637829fe4777b541f94a01279132c65a2d361e3d762ce0a08dd813e7fd5f The package @asyncapi/java-spring-template was found to contain malicious code. Source: ghsa-malware...

Malicious code in @ensdomains/dnsprovejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cba062a1b19731497546d926af22ae0964962df93fc3bd059d0e66df0fd41521 The package @ensdomains/dnsprovejs was found to contain malicious code. Source: ghsa-malware...

Malicious code in @orbitgtbelgium/orbit-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421c190facc026ad647e4bda5141049326833c8790e0dae8e48a651720f4fad0 The package @orbitgtbelgium/orbit-components was found to contain malicious code. Source: ghsa-malware...

Malicious code in bool-expressions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec2dea19a068cf577e39f58533ccea7e2c6b5b0c9850de785f955a8f3304e2c9 The package bool-expressions was found to contain malicious code. Source: ghsa-malware 26f720c7eb2f6cce9791d2ffe73797674e5f19882b33308cde262deaa43671...

Exploit for External Control of File Name or Path in Microsoft

CVE-2025-2405...

MAL-2025-190572 Malicious code in react-svg-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9b392459196e5602d6e40cd38445d10e87e49d85b53b966aee554dd758fc1bd The package react-svg-module was found to contain malicious code. Source: ghsa-malware dd046bd4ddd4da53330303e0802201fda828bce7e1a21524aa7fc0da1fed95...

EUVD-2025-198068

Incorrect access control in mihomo v1.19.11 allows authenticated attackers with low-level privileges to read arbitrary files with elevated privileges via obtaining the external control key from the config file...

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass in the process of obtaining the external control key from the configuration file. An attacker can access arbitrary files with elevated privileges by leveraging authenticated access with low-level privileges...

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass in the process of obtaining the external control key from the configuration file. An attacker can access arbitrary files with elevated privileges by leveraging authenticated access with low-level privileges...

CVE-2025-56499

Incorrect access control in mihomo v1.19.11 allows authenticated attackers with low-level privileges to read arbitrary files with elevated privileges via obtaining the external control key from the config file...

CVE-2025-56499

Incorrect access control in mihomo v1.19.11 allows authenticated attackers with low-level privileges to read arbitrary files with elevated privileges via obtaining the external control key from the config file...

Malicious code in tailwindcss-setfavicon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91fc0eceb962b96f45fa2c5b85fe82bd7dd8a56b13ee4fe7e460091b7650af6f The package tailwindcss-setfavicon was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190556 Malicious code in 1libxmljs2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabdd956b939ba7ecadbced1795cced1214b25b2faf5920d3dd1f80374b42390 The package 1libxmljs2 was found to contain malicious code. Source: ghsa-malware f356ae30a62d4d1611f89041412c4c86aadd5c438b5809c1d4ee201ee814ea26 Any...

CVE-2025-56499

Incorrect access control in mihomo v1.19.11 allows authenticated attackers with low-level privileges to read arbitrary files with elevated privileges via obtaining the external control key from the config file...

CVE-2025-56499

Incorrect access control in mihomo v1.19.11 allows authenticated attackers with low-level privileges to read arbitrary files with elevated privileges via obtaining the external control key from the config file...

PT-2025-47393

Name of the Vulnerable Software and Affected Versions mihomo version 1.19.11 Description An access control issue exists in mihomo version 1.19.11. Authenticated attackers with limited privileges can read arbitrary files with higher privileges. This is achieved by obtaining an external control key...

CVE-2025-56499

VULNERABILITY: CVE-2025-56499 affects mihomo v1.19.11. Description: an access-control issue allows authenticated attackers with low privileges to read arbitrary files with elevated privileges by obtaining the external control key from the configuration file. Impact: elevated read access (confiden...