Cleartext Storage Of Sensitive Information

PMD is vulnerable to Cleartext Storage of Sensitive Information. The vulnerability is due to exposed signing key passphrases due to their inclusion in a published JAR file on Maven Central, potentially compromising the associated private keys...

SAMSUNG Mobile devices 安全漏洞

Samsung Blockchain Keystore is a secure storage solution introduced by South Korea's Samsung SAMSUNG on its mobile devices to protect users' blockchain keys and digital assets. Samsung Blockchain Keystore suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to...

Important: containerd

Issue Overview: Applications and libraries which misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that "A call to this function does not guarantee that the key offered is in fact used to...

Malicious code in ibm.github.io (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af453f19a328ea28db57d39cc9c120b102b0ba80e4c420727d562290f49d5ec5 Any computer that has this package installed or running should be considered...

Malicious code in solana-graphql-playground (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 293a02fa1726046ea481def165e8c209dc7e6e1b108bc997d12977ecd4e613f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1189 Malicious code in type-on-strap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb7c3c0201aafc369ec9ca67cd6610fafdf472d7be2ea007f687c0cdc3e9e62f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1195 Malicious code in web3-onboard-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 539dc0279cc6a739adf371f7670ad0946dfd3a95b07e9f55f88a2047dc7568eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1180 Malicious code in ton-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac83c8d18317fa7c1f2fecc782c419c88d798a4e02d25874898824c47e74f1ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ton-payment-channels-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9e7497de28b982ff9a30a2d494d34eca9c190bba81a330f16ca8cdf7955e20e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1181 Malicious code in ton-payment-channels-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9e7497de28b982ff9a30a2d494d34eca9c190bba81a330f16ca8cdf7955e20e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1198 Malicious code in worker-template-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06ee62f6404cbc2ab384a294313e49c9685b3f7a3251a4c9b86dd1d8e90dfb05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1068 Malicious code in browser-sign-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6d411988c71278a3b1cc021357c555ec43f75d6834289977b60fb08c1ce8d19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1200 Malicious code in worldcoin-grants-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f434639d184713c5d345b9503077d108e6700344719b5e4825d684743661e01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1157 Malicious code in onchain-summer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cfb3627a51e1629c525e521906f38f34f9ba857e21362db797959ce19749cc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in images.pages.dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 298bd92325308b96679afb4dab0afe1faeded22ac6714ac9b1a9bf0df3e6119a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in onchain-summer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cfb3627a51e1629c525e521906f38f34f9ba857e21362db797959ce19749cc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1131 Malicious code in hiero-sdk-cpp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61510394f06f71bb323c3d38fbd8d57e3ac9f52dd65bf7f1054e952798c9ac39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1061 Malicious code in anyswappoc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11b4883135435c180fd5e1ec5f7f3d0ce3da30f86c240121ed36c3f2c09f1441 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1148 Malicious code in metamask-sdk-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 563827ad840866efcd9358d913c0a4e28044e336ac6d4ebc9a33c631afd70ed4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cscvue-unplugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a34e0f08d710a6b8c04716fa45de265e2171939895e01a7d62f79cdefe72152 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...