7053 matches found
Malicious code in skiko-wasm-js (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-48869 Malicious code in skiko-wasm-js (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-48868 Malicious code in skiko-js-wasm-runtime (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in echats-js (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-48834 Malicious code in echats-js (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2025-6833 All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Clocking In/Out
The All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0 via the 'aiotimeclocklitejs' AJAX action due to missing validation on a user controlled key. This makes it...
Malicious code in js-repack (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7a80a1c4ce3e508e53f6fbcff1d53486d344d5e88efb691abaad37cc22759f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48554 Malicious code in js-repack (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7a80a1c4ce3e508e53f6fbcff1d53486d344d5e88efb691abaad37cc22759f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-35356
Malicious code in js-repack npm...
Malicious Package
Overview js-repack is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
MAL-2025-48620 Malicious code in cucumber-js-cypress-cucumber (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70db607bb8c970e11a45d9a570b2d97a6a3293ca89e4a789c6a8163b9ebf78cb Any computer that has this package installed or running should be considered...
PT-2025-43063
Name of the Vulnerable Software and Affected Versions All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier plugin for WordPress versions prior to 2.1 Description The All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier plugin for WordPress is susceptible ...
Malicious code in bcrypt-js-edge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bca5605febed4ebf8f03746e572ca1fb05186ff2714f0f1c34842fc4858f9fa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview bcrypt-js-edge is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-48530 Malicious code in bcrypt-js-edge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bca5605febed4ebf8f03746e572ca1fb05186ff2714f0f1c34842fc4858f9fa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2025-46093
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=453198741 Crash type: Use-of-uninitialized-value Crash state: js create function JS EvalInternal JS EvalObject...
Malicious code in css-platform-js (npm)
The package css-platform-js was found to contain malicious code...
Malicious code in ccs-platform-js (npm)
The package ccs-platform-js was found to contain malicious code...