Malicious code in facts-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd985aa898a134a3edaeb33d9629378a215a674e8110bb88fbbdfce59c8883e The package facts-base was found to contain malicious code. Source: ghsa-malware 11ed9b0a6622d128df892c963646c0dd03c4a65ddd22b4ac0aebea5d9f4b0adc Any...

Malicious code in node-calculator-0d96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a218c7694e38a516577be3b65e74e782080f98629b0cc39516beab80562f57b The package node-calculator-0d96 was found to contain malicious code. Source: ghsa-malware...

WAGO Indsutrial-Managed-Switches 安全漏洞

WAGO Indsutrial-Managed-Switches is a series of high-performance network devices from WAGO, Germany. A security vulnerability exists in WAGO Indsutrial-Managed-Switches, which stems from an unsafe sscanf call in the checkcookie function, which could lead to full control of the device...

Malicious code in react-svg-bundler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0653c3340d723105ee0db3b1e440d764e9c750287b1f50e796b4ce847ddaee46 The package react-svg-bundler was found to contain malicious code. Source: ghsa-malware...

CVE-2025-66555

AirKeyboard iOS App 1.0.5 contains a missing authentication vulnerability that allows unauthenticated attackers to type arbitrary keystrokes directly into the victim's iOS device in real-time without user interaction, resulting in full remote input control...

CVE-2025-66555 AirKeyboard iOS App 1.0.5 - Remote Input Injection

AirKeyboard iOS App 1.0.5 contains a missing authentication vulnerability that allows unauthenticated attackers to type arbitrary keystrokes directly into the victim's iOS device in real-time without user interaction, resulting in full remote input control...

Malicious code in elf-stats-marzipan-cocoa-562 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5eef2a7b97397b3b317b2e74da3cf23e6c43147a144bed8c3fbcbb35ca6249f The package elf-stats-marzipan-cocoa-562 was found to contain malicious code. Source: ghsa-malware...

Unauthorized Account Creation

melis-core is vulnerable to Unauthorized Account Creation. The vulnerability is due to missing authentication on the /melis/MelisCore/ToolUser/addNewUser endpoint, where an unauthenticated attacker can directly invoke this function to create a new administrator account and gain full control of th...

MAL-2025-192295 Malicious code in elf-stats-jubilant-ornament-641 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b627f81ef3d4b49b83a86d60778eb2510e4d1cc4a7d0786394c115f194b9264 The package elf-stats-jubilant-ornament-641 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191558 Malicious code in data-xabit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03b37d6663928ececa76b6d1d4a4debb3e4e4cf163a4f8604f8e16d2df90548f The package data-xabit was found to contain malicious code. Source: ghsa-malware ef666e2a6f2f7477fb30dd787eaf97877e81e62aa9bbe396639b8c7beeebc5d3 Any...

CVE-2025-66266

The RupsMon.exe service executable in UPSilon 2000 has insecure permissions, allowing the 'Everyone' group Full Control. A local attacker can replace the executable with a malicious binary to execute code with SYSTEM privileges or simply change the config path of the service to a command; startin...

MAL-2025-191471 Malicious code in ahmed_salem_t (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc278db8d9e1de9bc4e08bdc6bb126ee202e1f3035b69348d6f1ff66dd448e83 The package ahmedsalemt was found to contain malicious code. Source: ghsa-malware 2b2f4d2a3aa2f5b0a62127ad70f27d33c81f4d216a3fd4ff651f855cbb3b7f8e An...

CVE-2025-66266 Insecure SYSTEM Service Permissions in UPSilon2000V6.0 (RupsMon.exe) leading to trivial Local Privilege Escalation

The RupsMon.exe service executable in UPSilon 2000 has insecure permissions, allowing the 'Everyone' group Full Control. A local attacker can replace the executable with a malicious binary to execute code with SYSTEM privileges or simply change the config path of the service to a command; startin...

CVE-2025-66266 Insecure SYSTEM Service Permissions in UPSilon2000V6.0 (RupsMon.exe) leading to trivial Local Privilege Escalation

The RupsMon.exe service executable in UPSilon 2000 has insecure permissions, allowing the 'Everyone' group Full Control. A local attacker can replace the executable with a malicious binary to execute code with SYSTEM privileges or simply change the config path of the service to a command; startin...

PT-2025-48122

The RupsMon.exe service executable in UPSilon 2000 has insecure permissions, allowing the 'Everyone' group Full Control. A local attacker can replace the executable with a malicious binary to execute code with SYSTEM privileges or simply change the config path of the service to a command; startin...

MAL-2025-191535 Malicious code in tableate (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 762292d92c617c287b3c6b54f7c4a8b8630e7dd893b40dd05bade462fec7ca26 This package is malicious and typosquating the legitimate pyspellchecker library. This package will deploy a remote-access trojan that...

MAL-2025-191458 Malicious code in @medusajs/medusa-oas-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48124e119c7f2c21e744172a5901266335824c5ceac7a1c631805772baa3798a The package @medusajs/medusa-oas-cli was found to contain malicious code. Source: ghsa-malware...

Malicious code in @pradhumngautam/common-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8984d278847eccce8a7e440093a12e26681f10e6534f163544592f20e7539c81 The package @pradhumngautam/common-app was found to contain malicious code. Source: ghsa-malware...

Malicious code in @lessondesk/material-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 124d8e4d2ba731e6a005fd1c68c60af6629b037c8c121d0468394110d2f98103 The package @lessondesk/material-icons was found to contain malicious code. Source: ghsa-malware...

Malicious code in @lessondesk/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef9fcb377fe99dad0e34ec63a5ac929adfc5d8be48e49d330d4785e1d2a6a7f The package @lessondesk/eslint-config was found to contain malicious code. Source: ghsa-malware...