19 matches found
Malicious code in external-process-live-log (npm)
Source: amazon-inspector e3b21f410276a5ec436e583a1b0c08aab7f5f977f3868fd742c7a05ab0197751 The package's default export issues an HTTPS request to the hardcoded bare-IP endpoint https://31.97.137.157:45000/icons/107 with a 'bearrtoken: logo' header and a font-awesome-styled path used as cover and...
Malicious code in process-live-log (npm)
Source: amazon-inspector 5a36d35f64443b9dc4a2395017b8738562a321c9765089f916eeebdf58281d57 The default export getPlugin issues an HTTPS request to the hardcoded bare-IP endpoint https://31.97.137.157:45000/icons/107 and passes the returned data.credits field to new Function... with require, proces...
MAL-2026-13949 Malicious code in external-process-live-log (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3b21f410276a5ec436e583a1b0c08aab7f5f977f3868fd742c7a05ab0197751 The package's default export issues an HTTPS request to the hardcoded bare-IP endpoint https://31.97.137.157:45000/icons/107 with a 'bearrtoken: logo...
Malicious code in external-process-live-log (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3b21f410276a5ec436e583a1b0c08aab7f5f977f3868fd742c7a05ab0197751 The package's default export issues an HTTPS request to the hardcoded bare-IP endpoint https://31.97.137.157:45000/icons/107 with a 'bearrtoken: logo...
Malicious code in process-live-log (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a36d35f64443b9dc4a2395017b8738562a321c9765089f916eeebdf58281d57 The default export getPlugin issues an HTTPS request to the hardcoded bare-IP endpoint https://31.97.137.157:45000/icons/107 and passes the returned...
MAL-2026-13960 Malicious code in process-live-log (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a36d35f64443b9dc4a2395017b8738562a321c9765089f916eeebdf58281d57 The default export getPlugin issues an HTTPS request to the hardcoded bare-IP endpoint https://31.97.137.157:45000/icons/107 and passes the returned...
Malicious Package
Overview process-live-log is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview external-process-live-log is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
EUVD-2025-4274
Malicious code in bioql PyPI...
BIT-MOODLE-2025-26529 Stored XSS risk in admin live log
Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk...
Moodle has a stored XSS risk in admin live log
Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk...
GHSA-WR88-X8CM-7CGQ Moodle has a stored XSS risk in admin live log
Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk...
Cross-site Scripting (XSS)
Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Cross-site Scripting XSS through the site administration live log. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicious script into an...
UBUNTU-CVE-2025-26529
Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk...
CVE-2025-26529 Stored XSS risk in admin live log
Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk...
CVE-2025-26529
Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk...
CVE-2025-26529 Stored XSS risk in admin live log
Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk...
CVE-2025-26529: Improper Neutralization of Input During Web Page Generation
Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk...
CVE-2006-4991
RSA Keon Certificate Authority KeonCA Manager 6.5.1 and 6.6 allows privileged local users to hide malicious Certificate Authority CA activities by modifying CA auditor logs without detection by 1 modifying or deleting a and its signature from the XML log in a way that is not detected by the...