313 matches found
Malicious Package
Overview link-flare-loglevel-command is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious code in enceladus-stream-chai-loglevel (npm)
Source: amazon-inspector 8a963320fc9701dd9f33123eca2220399517e38a891994d0bbc0ab226aabcf31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in @spectraltest/loglevel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e1cb56f359fd866bba1012e19f4ced6eba1a428ab4cd7f5c9696753fb921a25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-11232 Malicious code in @spectraltest/loglevel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e1cb56f359fd866bba1012e19f4ced6eba1a428ab4cd7f5c9696753fb921a25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview @spectraltest/loglevel is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...
CVE-2026-44934: Insertion of Sensitive Information Into Debugging Code
A information disclosure when DEBUG loglevel is set in SUSE Rancher AI Agent 1.0 before 1.0.2 could leak API keys or LLM response text with potential sensitive data into logfiles, allowing local attackers to misuse respective gained data or credentials...
CVE-2026-52999
A flaw was found in the Linux kernel's netfilter subsystem, specifically in the nfnetlinkosf module. When the NFOSFLOGLEVELALL option is configured, an out-of-bounds read vulnerability can occur during TCP option parsing. This issue can lead to incorrect data processing and logging failures,...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: cert-manager-cmctl, php-fpmexporter, whereabouts, step-ca, kubernetes-dashboard-metrics-scraper, trivy, rancher-telemetry, spqr, bank-vaults, argo-rollouts, gitness, nfs-subdir-external-provisioner, percona-server-mongodb-operator, crossplane-provider-sql, nerdctl,...
Malicious code in markdownlint-rollup-loglevel-toml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc9bcd9f7f8ab3bac1cfef2c4e32342014982407e7e69dedb4ebd4e42256d0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in remark-loglevel-process-nebula (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b2cdb762f4052d4146c3d2d35d10fe3fe6516343cf764c76cc9a051dfc4474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176241
Malicious code in sqlite-duplex-robotics-loglevel npm...
EUVD-2025-176194
Malicious code in stream-andromeda-proxima-loglevel npm...
EUVD-2025-176071
Malicious code in taphonomy-commitlint-kardashevscale-loglevel npm...
EUVD-2025-175569
Malicious code in weywot-webdriver-mocha-loglevel-fornax npm...
EUVD-2025-177540
Malicious code in norma-quantumfoam-loglevel-commitizen npm...
EUVD-2025-176858
Malicious code in quark-dorado-ethology-loglevel npm...
EUVD-2025-176697
Malicious code in remark-loglevel-process-nebula npm...
EUVD-2025-176438
Malicious code in selenology-zenobia-loglevel-prettier-stylelint npm...