Malicious code in cpp-spa-loginad (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2071430481129f44784f3feac01baf6baa6ab03ebf6855bd2231bc91594038d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ai-verify-shared-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f88a03bc9be981617ba8a71b55e2c7051d9cdf7397638bc7ec35ad84c17c455b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in simple-export-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d44defb42445d3a7511f32616401e72a003e6eee8f3e47cd2ca1f41b4026f65b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-textfit-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd133ed4ff9a23964d050578a197c7d8d9a45ba07d60f2d3b031b350bae49370 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cb4good (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c16e1ebf21c15491517654d93507f4ac7ca8aa96e47403f10fd753ef7bcbca95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Server-side Request Forgery (SSRF)

Overview org.webjars.bowergithub.axios:axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF due to not setting allowAbsoluteUrls to false by default when processing a requested URL in buildFullPath. ...

CVE-2024-12975

A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface...

CVE-2024-12975

A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface...

CVE-2024-12975 Silicon Labs CPC can leak information in full duplex SPI

A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface...

CVE-2024-12975 Silicon Labs CPC can leak information in full duplex SPI

A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface...

CVE-2024-12975

The CVE-2024-12975 entry concerns a buffer overread in the Silicon Labs CPC application when operating in full duplex SPI after receiving an invalid SPI packet. The provided connected sources indicate the issue arises in the CPC/SiLabs stack and has a low CVSS base score (1.0, LOW) with physical ...

CVE-2024-12975 Silicon Labs CPC can leak information in full duplex SPI

A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface...

CVE-2024-12975: Buffer Over-read

A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface...

Malicious code in auth0-ai-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53d91c2333523a3496974b09552ff384b980de11cce7d7cf13b342b5f6351b77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Missing Authorization in Spicethemes Newscrunch

Newscrunch Exploit CVE-2025-1307 🚨 Overview This exploit...

Malicious code in zz-react-custom-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c52c19012a2e7ff5c32331c8fb8bdf0ec9811d36c029f8d2ff30de7c98fdf6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aem-headless-advanced-tutorial-wknd-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fb0b752510b8d479c92185f2871183cd1bbd1ef4d7507d43ccd130c3fd24e1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2162 Malicious code in aem-headless-advanced-tutorial-wknd-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fb0b752510b8d479c92185f2871183cd1bbd1ef4d7507d43ccd130c3fd24e1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @adminproxy/module-utils-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8a2cafa2022fe884b6ebbf6b805ed194ed4b93c8b77b15f7d03940e069c9137 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @adminproxy/module-utils-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbdecb9253986cff5b752fb6e685010877c7e57ebcc7c19461ac03578f80b3c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...