MAL-2025-1320 Malicious code in htx-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11c21a33d124e256ea82e6288151a03d6521483b95b012e9939de5062c0d12c2 Any computer that has this package install...

MAL-2025-1314 Malicious code in bingx-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5d8cdbe3e0f835d014b61ec4d6c06b7b62a9ac36231e8ff2488cd4ce4fbe0ca Any computer that has this package install...

MAL-2025-1283 Malicious code in xt-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fed00145b4a626337b346006d12cb2cae629e16ec57d24bb94c191ccd5823c9 Any computer that has this package install...

MAL-2025-555 Malicious code in meli-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 95f626385442495ffbfeb51de2392e389f8b69da723a133025f2ce302f513b4f The OpenSSF Package Analysis project identified 'meli-internal' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-393 Malicious code in apple-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 97f5fa89a33c919b4f7934cd8ef1928bd360bed99e4c38343623b05c019d8503 The OpenSSF Package Analysis project identified 'apple-internal' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in internalpackage-ncctest (npm)

--- -= Per source details. Do not edit below this line.=-...

golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests

A flaw was found in the Golang net/http/internal package. This issue may allow a malicious user to send an HTTP request and cause the receiver to read more bytes from network than are in the body up to 1GiB, causing the receiver to fail reading the response, possibly leading to a Denial of Servic...

golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests

A flaw was found in the Golang net/http/internal package. This issue may allow a malicious user to send an HTTP request and cause the receiver to read more bytes from network than are in the body up to 1GiB, causing the receiver to fail reading the response, possibly leading to a Denial of Servic...

CVE-2023-6839

Due to improper error handling, a REST API resource could expose a server side error containing an internal WSO2 specific package name in the HTTP response...

PT-2023-32787 · Wso2 · Wso2

Name of the Vulnerable Software and Affected Versions: WSO2 affected versions not specified Description: The issue is related to improper error handling in a REST API resource, which could expose a server-side error containing an internal WSO2 specific package name in the HTTP response...

Malicious code in elastic-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbe3c8eb7407200d7e0976f17ba59d709e62dba4fc1291d71efa92c6761c466e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1301 Malicious code in some_internal_package_for_testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 53107273160f2452143bcbee916077e6adbca0f10d5f2d80e0afeb276d92d788 The OpenSSF Package Analysis project identified 'someinternalpackagefortesting' @ 99.9.9 npm as malicious. It is considered malicious because: -...

Malicious code in codefest-internal-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c48a60946f3d6dc5791a1050df2488f9c77f59d68f41c0109b201d56925af1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in appsec-internal-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6a57a144486447cff272d9d213ea422e6978e022890c8b68dedc19b9cfe4b1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1972 Malicious code in codefest-internal-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c48a60946f3d6dc5791a1050df2488f9c77f59d68f41c0109b201d56925af1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internal_package_goludev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a323c6c4f41a12d995eac807d8afe85981e28cba5efd644e5243e81b15748850 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internal_pkg_for_755 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7dd5a41300666bbd2a30fef1476d841d1286f53c64a5328ce4a1c741ad817c5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3874 Malicious code in internal_pkg_for_755 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7dd5a41300666bbd2a30fef1476d841d1286f53c64a5328ce4a1c741ad817c5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3875 Malicious code in internal_pkg_for_verd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5e3bc07bd1676ed028d7c395a5da8b9ae00beb19878cf88bd7b4a2f2221cb8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blz-internal-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b447563fa806880a2d1e5c85bd22a6d1db863feb00eb5337d44ee85468389eb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...