7745 matches found
GNU GRUB 安全漏洞
GNU GRUB is a Linux system boot program from the GNU community. A security vulnerability exists in GNU GRUB that originates from incorrectly retaining memory pointers during file closure, which could lead to a denial of service...
Dragon Breath Uses RONINGLOADER to Disable Security Tools and Deploy Gh0st RAT
The threat actor known as Dragon Breath has been observed making use of a multi-stage loader codenamed RONINGLOADER to deliver a modified variant of a remote access trojan called Gh0st RAT. The campaign, which is primarily aimed at Chinese-speaking users, employs trojanized NSIS installers...
Malicious code in buffer-css-loader-draco-sirius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5ae31d8f1fe77a4535d4c2304e138491272c5692a24d0d9e2b9c8877d430f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177167
Malicious code in pino-pretty-radiant-less-loader-galaxy npm...
EUVD-2025-178184
Malicious code in koa-callback-postcss-loader-webdriver-manager npm...
EUVD-2025-179178
Malicious code in electron-postcss-loader-yaml-pyxis npm...
Malicious code in nestjs-postcss-loader-slides-spinner (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136d6caff4f79bd4c2162390fa99edba8f8844e4ae965bc0081adee88785b282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175718
Malicious code in virgo-css-loader-whitedwarf-mongoose npm...
Malicious code in dorado-hexo-sqlite-postcss-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4a93ae9c0b359cf320351a3af5fd7016688cc60265a5c221a86d43cd0faad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176268
Malicious code in spectron-flare-css-loader-tethys npm...
EUVD-2025-178549
Malicious code in hercules-css-loader-restart-eslint-plugin npm...
EUVD-2025-179791
Malicious code in chakra-ui-sadr-yaml-less-loader npm...
EUVD-2025-177551
Malicious code in nodemon-css-loader-husky-parcel npm...
EUVD-2025-177530
Malicious code in nova-chakra-ui-css-loader-eris npm...
EUVD-2025-177844
Malicious code in middleware-css-loader-eigenstate-pavo npm...
EUVD-2025-180244
Malicious code in augmentedreality-mesosphere-style-loader-registry npm...
EUVD-2025-178771
Malicious code in ganymede-sass-loader-dagda-husky npm...
Malicious code in paleoecology-backend-hydrogeology-postcss-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ac770bddada6d8683dab27aa4b1ff2328daf6bf4f00fd6061392212b35abb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in supercluster-command-betelgeuse-style-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c4312f9a8f4944f7302c2d84d8f462d661b5c52a2451094345926045d0e847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...