5967 matches found
Malicious code in react-linear-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccf5203f35299ba1826e76daefdfa5e28ce387072c612234ee91afa242ba8df5 The package react-linear-loader was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190993 Malicious code in react-linear-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccf5203f35299ba1826e76daefdfa5e28ce387072c612234ee91afa242ba8df5 The package react-linear-loader was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198722
Malicious code in @ensdomains/vite-plugin-i18next-loader npm...
Malicious code in @ensdomains/vite-plugin-i18next-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473280de7d29dd017bfa50f0826a0aa810d204a6949fe49d6753ff28ff61d505 The package @ensdomains/vite-plugin-i18next-loader was found to contain malicious code. Source: ghsa-malware...
CVE-2025-12739
CVE-2025-12739 involves a Cross-Site Scripting (XSS) vulnerability in Looker’s Extension Loader. An attacker with viewer permissions can craft a malicious URL that, when opened by a Looker administrator, could run attacker-supplied script. Exploitation requires at least one Looker extension insta...
CVE-2025-12739 Cross-Site Scripting (XSS) in Looker's Extension Loader leading to Admin Account Compromise
An attacker with viewer permissions in Looker could craft a malicious URL that, when opened by a Looker admin, would execute an attacker-supplied script. Exploitation required at least one Looker extension installed on the instance. Looker-hosted and Self-hosted were found to be vulnerable. This...
CVE-2025-12739 Cross-Site Scripting (XSS) in Looker's Extension Loader leading to Admin Account Compromise
An attacker with viewer permissions in Looker could craft a malicious URL that, when opened by a Looker admin, would execute an attacker-supplied script. Exploitation required at least one Looker extension installed on the instance. Looker-hosted and Self-hosted were found to be vulnerable. This...
Tsundere Botnet Expands Using Game Lures and Ethereum-Based C2 on Windows
Cybersecurity researchers have warned of an actively expanding botnet dubbed Tsundere that's targeting Windows users. Active since mid-2025, the threat is designed to execute arbitrary JavaScript code retrieved from a command-and-control C2 server, Kaspersky researcher Lisandro Ubiedo said in an...
GNU GRUB 安全漏洞
GNU GRUB is a Linux system boot program from the GNU community. A security vulnerability exists in GNU GRUB that originates from incorrectly retaining memory pointers during file closure, which could lead to a denial of service...
Dragon Breath Uses RONINGLOADER to Disable Security Tools and Deploy Gh0st RAT
The threat actor known as Dragon Breath has been observed making use of a multi-stage loader codenamed RONINGLOADER to deliver a modified variant of a remote access trojan called Gh0st RAT. The campaign, which is primarily aimed at Chinese-speaking users, employs trojanized NSIS installers...
EUVD-2025-176921
Malicious code in publish-postcss-loader-achernar-hermes npm...
EUVD-2025-180182
Malicious code in await-supercluster-prosthetics-postcss-loader npm...
EUVD-2025-178041
Malicious code in local-terser-postcss-loader-eventhoriz npm...
EUVD-2025-176518
Malicious code in sass-loader-prompts-inquirer-blaze npm...
EUVD-2025-179790
Malicious code in chakra-ui-standard-nuxtjs-sass-loader npm...
Malicious code in sass-loader-iota-lyra-fomalhaut (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe3ffd8977035d4a0def8ba740d894f180ef6f02e00fdfd2d89633e773386f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177837
Malicious code in mineralogy-less-loader-dagda-global npm...
EUVD-2025-178549
Malicious code in hercules-css-loader-restart-eslint-plugin npm...