5985 matches found
EUVD-2025-198722
Malicious code in @ensdomains/vite-plugin-i18next-loader npm...
Malicious code in @ensdomains/vite-plugin-i18next-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473280de7d29dd017bfa50f0826a0aa810d204a6949fe49d6753ff28ff61d505 The package @ensdomains/vite-plugin-i18next-loader was found to contain malicious code. Source: ghsa-malware...
CVE-2025-12739
CVE-2025-12739 involves a Cross-Site Scripting (XSS) vulnerability in Looker’s Extension Loader. An attacker with viewer permissions can craft a malicious URL that, when opened by a Looker administrator, could run attacker-supplied script. Exploitation requires at least one Looker extension insta...
CVE-2025-12739 Cross-Site Scripting (XSS) in Looker's Extension Loader leading to Admin Account Compromise
An attacker with viewer permissions in Looker could craft a malicious URL that, when opened by a Looker admin, would execute an attacker-supplied script. Exploitation required at least one Looker extension installed on the instance. Looker-hosted and Self-hosted were found to be vulnerable. This...
CVE-2025-12739 Cross-Site Scripting (XSS) in Looker's Extension Loader leading to Admin Account Compromise
An attacker with viewer permissions in Looker could craft a malicious URL that, when opened by a Looker admin, would execute an attacker-supplied script. Exploitation required at least one Looker extension installed on the instance. Looker-hosted and Self-hosted were found to be vulnerable. This...
Tsundere Botnet Expands Using Game Lures and Ethereum-Based C2 on Windows
Cybersecurity researchers have warned of an actively expanding botnet dubbed Tsundere that's targeting Windows users. Active since mid-2025, the threat is designed to execute arbitrary JavaScript code retrieved from a command-and-control C2 server, Kaspersky researcher Lisandro Ubiedo said in an...
GNU GRUB 安全漏洞
GNU GRUB is a Linux system boot program from the GNU community. A security vulnerability exists in GNU GRUB that originates from incorrectly retaining memory pointers during file closure, which could lead to a denial of service...
Dragon Breath Uses RONINGLOADER to Disable Security Tools and Deploy Gh0st RAT
The threat actor known as Dragon Breath has been observed making use of a multi-stage loader codenamed RONINGLOADER to deliver a modified variant of a remote access trojan called Gh0st RAT. The campaign, which is primarily aimed at Chinese-speaking users, employs trojanized NSIS installers...
EUVD-2025-176921
Malicious code in publish-postcss-loader-achernar-hermes npm...
EUVD-2025-180182
Malicious code in await-supercluster-prosthetics-postcss-loader npm...
EUVD-2025-178041
Malicious code in local-terser-postcss-loader-eventhoriz npm...
EUVD-2025-176518
Malicious code in sass-loader-prompts-inquirer-blaze npm...
EUVD-2025-179790
Malicious code in chakra-ui-standard-nuxtjs-sass-loader npm...
Malicious code in sass-loader-iota-lyra-fomalhaut (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe3ffd8977035d4a0def8ba740d894f180ef6f02e00fdfd2d89633e773386f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177843
Malicious code in middleware-exec-callisto-postcss-loader npm...
EUVD-2025-176169
Malicious code in style-loader-lint-commitlint-config-angular-bootstrap npm...
EUVD-2025-177956
Malicious code in markdown-less-loader-joviology-fetch npm...
EUVD-2025-177553
Malicious code in nodejs-sass-loader-carina-duplex npm...
Malicious code in quark-eslint-config-materialize-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f14e76d31b688dacef1a496176a9ca1ea81b594b81b2373404d54a5de86a60df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...