1374 matches found
Malicious code in events-web1 (npm)
The package communicates with a domain associated with malicious activity...
CVE-1999-1471
creationtimestamp| type| source ---|---|--- 2025-07-26 20:42:56+00:00| seen| https://gist.github.com/DEEPML1818/fef33d765177026df668a4476d4fe698 2025-07-26 20:48:36+00:00| seen| https://gist.github.com/DEEPML1818/8672f137125674c3936651ee63417e61 2026-02-17 07:21:35+00:00| seen|...
Malicious code in snx-sips (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in vercel-internals (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in google-login-flow (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @toptal/picasso-accordion (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in malicus (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d151385056670ff22bfb80dc356c10ff622a77e115f8d81ee5f066220e05fda1 The only goal of the package is to execute a webhook or a suspicious file during installation. Closely related to 2025-07-0x9xnx - created after previous...
Malicious code in load-nyc-config (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in ted-ui (npm)
The package communicates with a domain associated with malicious activity...
China-linked LapDogs Campaign Drops ShortLeash Backdoor with Fake Certs
ShortLeash backdoor, used in the China-linked LapDogs campaign since 2023, enables stealth access, persistence, and data theft via compromised SOHO routers and fake certs...
Malicious code in mr456 (npm)
The package communicates with a domain associated with malicious activity...
DEBIAN-CVE-2022-50024
In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-axi-dmac: do not print NULL LLI during error During debugging we have seen an issue where axichandumplli is passed a NULL LLI pointer which ends up causing an OOPS due to trying to get fields from it. Simply print...
UBUNTU-CVE-2022-50024
In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-axi-dmac: do not print NULL LLI during error During debugging we have seen an issue where axichandumplli is passed a NULL LLI pointer which ends up causing an OOPS due to trying to get fields from it. Simply print...
CVE-2025-38032
In the Linux kernel, the following vulnerability has been resolved: mr: consolidate the ipmrcanfreetable checks. Guoyu Yin reported a splat in the ipmr netns cleanup path: WARNING: CPU: 2 PID: 14564 at net/ipv4/ipmr.c:440 ipmrfreetable net/ipv4/ipmr.c:440 inline WARNING: CPU: 2 PID: 14564 at...
Malicious code in pxsceneui-example-02 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: exfat: Fixed the infinite loop in exfatreaddir. If the file system is corrupted in such a way that a cluster links itself to another cluster in the cluster chain, and there is an unused directory entry in the cluster, the variabl...
Malicious code in juno-autodiscovery-browser (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 41d44749dbef196f862f8cab350ac18340a99385cbe96ecb2c13a1eed2603d99 The OpenSSF Package Analysis project identified...
CVE-2025-41661
creationtimestamp| type| source ---|---|--- 2025-06-11 08:04:57+00:00| seen| https://infosec.exchange/users/certvde/statuses/114663692500389345 2025-06-11 08:05:02+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lrcx4ijeuks2 2025-06-11 08:32:30+00:00| seen|...
Chinese-Linked Hackers Targeted 70+ Global Organizations, SentinelLABS
SentinelLABS uncovers widespread China-linked cyber espionage targeting over 70 global organizations and cybersecurity firms between July 2024 and…...
Over 70 Organizations Across Multiple Sectors Targeted by China-Linked Cyber Espionage Group
The reconnaissance activity targeting American cybersecurity company SentinelOne was part of a broader set of partially-related intrusions into several targets between July 2024 and March 2025. "The victimology includes a South Asian government entity, a European media organization, and more than...