31905 matches found
MAL-2025-190637 Malicious code in @asyncapi/generator-react-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0dadd48783af136a9dcf3f65cf9f24675841f02c7d1a5b6dc60709b392bf98 The package @asyncapi/generator-react-sdk was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190638 Malicious code in @asyncapi/modelina (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6021816ea47fd6743ed24c196df8db60f0649e0d5b185ceb9b418ba457b21e3 The package @asyncapi/modelina was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190644 Malicious code in @posthog/ai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a9a022b20b3025cb0846139ab6f2a1308025ed8ee902db18aacbfa95c6ea7e6 The package @posthog/ai was found to contain malicious code. Source: ghsa-malware 1e6a08419969270cca059f804bb3ec25aa0427f00ef555a9409c12d50921a83c An...
MAL-2025-190636 Malicious code in @asyncapi/generator (npm)
@asyncapi/generator version 3.3.1 was published as part of the "Miasma RAT" software supply-chain attack campaign identifier "miasma-train-p1" that compromised several widely used @asyncapi npm packages on 2026-07-14. The malicious code was injected using whitespace hiding: it is appended to a...
MAL-2025-190642 Malicious code in @asyncapi/react-component (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ebe88915a6eee986912a6566783764ff832588763eaa7b763710ed9f992299 The package @asyncapi/react-component was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190635 Malicious code in @asyncapi/avro-schema-parser (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563d7e586605241445ca55919018f95a81d98cbf9599eefa9c812eef9ccd7747 The package @asyncapi/avro-schema-parser was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190647 Malicious code in @postman/tunnel-agent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6961dafcc910bb7a6b1db8cb597068eeb85f973dcd669392354a7b614928dbf5 The package @postman/tunnel-agent was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190645 Malicious code in @posthog/core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92317c7f15a5eade85fe5c248b9b31870be1b384a5e5455dd3ea546c94c279e4 The package @posthog/core was found to contain malicious code. Source: ghsa-malware 8fce4f3a908b835a108ad8c30d1f2095f67e065911b353c73d0f9151be9ed6bf...
MAL-2025-190648 Malicious code in @zapier/zapier-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d39a04949d436340c422fef75a4dab8c20b487218e69e62cdcd198bddbe9ee0e The package @zapier/zapier-sdk was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190803 Malicious code in @ensdomains/cypress-metamask (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19427e64315a085f7001dff6a896730aa4cce33cf679f6a2da0a8bc61e96fb58 The package @ensdomains/cypress-metamask was found to contain malicious code. Source: ghsa-malware...
Malicious code in @quick-start-soft/quick-markdown-print (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49e82ae5f39d0c568ce2ebb23ff053c97eba1c0bb306b946c3fefc4c0680b526 The package @quick-start-soft/quick-markdown-print was found to contain malicious code. Source: ghsa-malware...
MAL-2025-191306 Malicious code in @quick-start-soft/quick-markdown-print (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49e82ae5f39d0c568ce2ebb23ff053c97eba1c0bb306b946c3fefc4c0680b526 The package @quick-start-soft/quick-markdown-print was found to contain malicious code. Source: ghsa-malware...
CVE-2025-64660
Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network...
GHSA-X697-JF34-GP5X
creationtimestamp| type| source ---|---|--- 2025-11-21 18:39:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115589142587853429 2025-11-22 21:17:53+00:00| seen| https://infosec.exchange/users/obivan/statuses/115595429345717232 2025-11-22 21:18:34+00:00| seen|...
GHSA-7HHV-H469-WC4Q vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-rails-ce-fips...
GHSA-GGXQ-HP9W-J794
creationtimestamp| type| source ---|---|--- 2025-11-21 12:50:48+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3m65d3nacyr2q...
EUVD-2025-198368
Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to bypass a security feature over a network...
CVE-2025-64660
Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network...
