MAL-2025-1415 Malicious code in fameex-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 956f7f7dd723546811c75dba7b1b262c4134f53f4ac86ae38350fcb67fa542eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1421 Malicious code in kcex-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ce9b582a4e9a1941b68d4f5d683d97c93a4bda05b8d494dc0bac426302aa4f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1339 Malicious code in gemini-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b876a5257a85fe7e175269384da4a6acc19851e9b43c4d6be807d7dc78c692e Any computer that has this package install...

MAL-2025-1320 Malicious code in htx-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11c21a33d124e256ea82e6288151a03d6521483b95b012e9939de5062c0d12c2 Any computer that has this package install...

MAL-2025-1318 Malicious code in crypto-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03333e75c4b6ad776d7e7e5242030adf8dc36c5a4df0f10802c33bff345516d6 Any computer that has this package install...

MAL-2025-1314 Malicious code in bingx-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5d8cdbe3e0f835d014b61ec4d6c06b7b62a9ac36231e8ff2488cd4ce4fbe0ca Any computer that has this package install...

MAL-2025-1283 Malicious code in xt-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fed00145b4a626337b346006d12cb2cae629e16ec57d24bb94c191ccd5823c9 Any computer that has this package install...

MAL-2025-555 Malicious code in meli-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 95f626385442495ffbfeb51de2392e389f8b69da723a133025f2ce302f513b4f The OpenSSF Package Analysis project identified 'meli-internal' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-393 Malicious code in apple-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 97f5fa89a33c919b4f7934cd8ef1928bd360bed99e4c38343623b05c019d8503 The OpenSSF Package Analysis project identified 'apple-internal' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in internalpackage-ncctest (npm)

--- -= Per source details. Do not edit below this line.=-...

golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests

A flaw was found in the Golang net/http/internal package. This issue may allow a malicious user to send an HTTP request and cause the receiver to read more bytes from network than are in the body up to 1GiB, causing the receiver to fail reading the response, possibly leading to a Denial of Servic...

golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests

A flaw was found in the Golang net/http/internal package. This issue may allow a malicious user to send an HTTP request and cause the receiver to read more bytes from network than are in the body up to 1GiB, causing the receiver to fail reading the response, possibly leading to a Denial of Servic...

CVE-2023-6839

Due to improper error handling, a REST API resource could expose a server side error containing an internal WSO2 specific package name in the HTTP response...

PT-2023-32787 · Wso2 · Wso2

Name of the Vulnerable Software and Affected Versions: WSO2 affected versions not specified Description: The issue is related to improper error handling in a REST API resource, which could expose a server-side error containing an internal WSO2 specific package name in the HTTP response...

Malicious code in elastic-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbe3c8eb7407200d7e0976f17ba59d709e62dba4fc1291d71efa92c6761c466e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1301 Malicious code in some_internal_package_for_testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 53107273160f2452143bcbee916077e6adbca0f10d5f2d80e0afeb276d92d788 The OpenSSF Package Analysis project identified 'someinternalpackagefortesting' @ 99.9.9 npm as malicious. It is considered malicious because: -...

Malicious code in codefest-internal-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c48a60946f3d6dc5791a1050df2488f9c77f59d68f41c0109b201d56925af1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1972 Malicious code in codefest-internal-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c48a60946f3d6dc5791a1050df2488f9c77f59d68f41c0109b201d56925af1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in appsec-internal-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6a57a144486447cff272d9d213ea422e6978e022890c8b68dedc19b9cfe4b1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internal_package_goludev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a323c6c4f41a12d995eac807d8afe85981e28cba5efd644e5243e81b15748850 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...