MAL-2026-15669 Malicious code in kendo-angular-window (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 012a21168890d2cc7482e8f4191dd4d1ee848314bdf7bc0970be32fb87a7ef25 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in kendo-angular-window (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 012a21168890d2cc7482e8f4191dd4d1ee848314bdf7bc0970be32fb87a7ef25 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @servicetitan/kendo-theme (npm)

npm/@servicetitan/kendo-theme is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-11882 Malicious code in @servicetitan/kendo-theme (npm)

npm/@servicetitan/kendo-theme is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

EUVD-2018-5967

Malware in sbrugna...

EUVD-2025-4543

Malicious code in bioql PyPI...

Malicious code in test-mlw2-sudor-kendo (npm)

The package test-mlw2-sudor-kendo was found to contain malicious code...

MAL-2025-38209 Malicious code in vendor-kendo (npm)

The package vendor-kendo was found to contain malicious code...

MAL-2025-36370 Malicious code in test-mlw2-sudor-kendo (npm)

The package test-mlw2-sudor-kendo was found to contain malicious code...

Malicious code in vendor-kendo (npm)

The package vendor-kendo was found to contain malicious code...

Progress多款产品 跨站脚本漏洞

Progress Telerik UI for ASP.NET Core and others are products of Progress, Inc.Progress Telerik UI for ASP.NET Core is a set of UI component libraries for building cross-platform responsive web applications.Progress Telerik UI for Progress Telerik UI for ASP.NET MVC is a library of UI components f...

MAL-2025-5426 Malicious code in kendo.core.min (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in kendo.core.min (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in kendo-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c625b89207a2538d26f0a63c2df6530e4e8c1cd6ebccacfc59ebee9d74e840a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4008 Malicious code in kendo-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c625b89207a2538d26f0a63c2df6530e4e8c1cd6ebccacfc59ebee9d74e840a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-11628

In Progress® Telerik® Kendo UI for Vue versions v2.4.0 through v6.0.1, an attacker can introduce or modify properties within the global prototype chain which can result in denial of service or command injection...

CVE-2024-11628

In Progress® Telerik® Kendo UI for Vue versions v2.4.0 through v6.0.1, an attacker can introduce or modify properties within the global prototype chain which can result in denial of service or command injection...

CVE-2024-11628 Prototype Pollution in Progress® Telerik® Kendo UI for Vue

In Progress® Telerik® Kendo UI for Vue versions v2.4.0 through v6.0.1, an attacker can introduce or modify properties within the global prototype chain which can result in denial of service or command injection...

CVE-2024-11628

Affected software: Progress Telerik Kendo UI for Vue. Vulnerable as per CVE-2024-11628 in versions v2.4.0 through v6.0.1. Root cause: prototype pollution via ability to introduce or modify properties in the global prototype chain, which can lead to denial of service or command injection. Document...

CVE-2024-11628 Prototype Pollution in Progress® Telerik® Kendo UI for Vue

In Progress® Telerik® Kendo UI for Vue versions v2.4.0 through v6.0.1, an attacker can introduce or modify properties within the global prototype chain which can result in denial of service or command injection...