Malicious code in rsi-configuration-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9a9a3e53f5018108f5ce8abbccd7313ccac30e61c7985e5d7d90291c30299957 The OpenSSF Package Analysis project identified 'rsi-configuration-module' @ 1.1.2 npm as malicious. It is considered malicious because: - The...

Malicious code in across-indexer-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b8fef241ea15f212acce31cd8bcc9d561a7f8a55c8367d778cca91c189d8a3a7 The OpenSSF Package Analysis project identified 'across-indexer-monorepo' @ 7.1.1 npm as malicious. It is considered malicious because: - The...

CVE-2025-5962

A flaw was found in the Lightspeed history service. Insufficient access controls allow a local, unprivileged user to access and manipulate the chat history of another user on the same system. By abusing inter-process communication calls to the history service, an attacker can view, delete, or...

ENJ: Optimizing Noise with Genetic Algorithms to Jailbreak LSMs

The widespread application of Large Speech Models LSMs has made their security risks increasingly prominent. Traditional speech adversarial attack methods face challenges in balancing effectiveness and stealth. This paper proposes Evolutionary Noise Jailbreak ENJ, which utilizes a genetic algorit...

Malicious code in @s21games/game-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97dc8ad2adce2cd01d1a95cf1a8bc271babf0b372e1b04cf71a8938f8718aac1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47093 Malicious code in @s21games/game-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97dc8ad2adce2cd01d1a95cf1a8bc271babf0b372e1b04cf71a8938f8718aac1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-46997 Malicious code in codex-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9c0b0d3723aea4e9ace65a23c56b8f951b48f31f09558674bc6de5e788c8c7de The OpenSSF Package Analysis project identified 'codex-monorepo' @ 8.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2025-46986 Malicious code in mcp-server-everything (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 263d07d53076b8ca1efe56fcd69d4a4e3c6d6a496b6086a03b8bafb8ae58900c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-55824

ModStartCMS v9.5.0 has an arbitrary file write vulnerability, which allows attackers to write malicious files and execute malicious commands to obtain sensitive data on the server...

CVE-2025-55824: Improper Neutralization of Special Elements used in a Command

ModStartCMS v9.5.0 has an arbitrary file write vulnerability, which allows attackers to write malicious files and execute malicious commands to obtain sensitive data on the server...

MAL-2025-46925 Malicious code in authzd-client (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 45ba3e72eb15bda66737b4c0b7addefe2fa72e79d4a38a82e9dd53722cc04f7b The OpenSSF Package Analysis project identified 'authzd-client' @ 0.11.10.r813fef313 rubygems as malicious. It is considered malicious because: ...

Malicious code in proto-education-web (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fe0791b8a3d9af1c4b04c567db2fc37ae9cbacd29a4ace0c5e07b75720f6c718 The OpenSSF Package Analysis project identified 'proto-education-web' @ 0.0.7.ref8a4ad331 rubygems as malicious. It is considered malicious...

Malicious code in proto-trust-metadata-api (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b87774d0bcfbcd33d81c38f3c6d26c986559b07bc1e15717164022afe4de346c The OpenSSF Package Analysis project identified 'proto-trust-metadata-api' @ 99.99.99 rubygems as malicious. It is considered malicious because:...

MAL-2025-46961 Malicious code in prose_diff (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1b4d01c12dfc0e3356a6e2613833c8afd50caee6c1cd2882fe4be1b84e182fdf The OpenSSF Package Analysis project identified 'prosediff' @ 99.99.99 rubygems as malicious. It is considered malicious because: - The package...

MAL-2025-46964 Malicious code in turboghas-client (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ad6c1ebcf6bfd3fd771aad2e5628f388059a1675ca82b4196ede826dd02e05bf The OpenSSF Package Analysis project identified 'turboghas-client' @ 99.99.99 rubygems as malicious. It is considered malicious because: - The...

Malicious code in mvnd (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d523f79a74314c8419942e259c5fc48634c3e75a90de8e0337b430df5a28392e The OpenSSF Package Analysis project identified 'mvnd' @ 99.99.99 rubygems as malicious. It is considered malicious because: - The package...

MAL-2025-46959 Malicious code in mvnd (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d523f79a74314c8419942e259c5fc48634c3e75a90de8e0337b430df5a28392e The OpenSSF Package Analysis project identified 'mvnd' @ 99.99.99 rubygems as malicious. It is considered malicious because: - The package...

MAL-2025-46955 Malicious code in monolith-twirp-pages-pagesdeployerapi (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 73a08935b8c380f8b7bb77b1d747d25a9af720bd5d30e375a9acc79ca14b82bd The OpenSSF Package Analysis project identified 'monolith-twirp-pages-pagesdeployerapi' @ 1.9.8 rubygems as malicious. It is considered maliciou...

MAL-2025-46934 Malicious code in monolith-twirp-odometer-core (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 559151bc8f149e686c1483fbc9ed476a900c5109a87ed60f413125cf9d178db7 The OpenSSF Package Analysis project identified 'monolith-twirp-odometer-core' @ 1.0.19 rubygems as malicious. It is considered malicious becaus...

Malicious code in monolith-twirp-snippy-snippy (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 48e4b752eb90b82df41239d8194646b9ab47b4e9e147dae4011c665a05d776b0 The OpenSSF Package Analysis project identified 'monolith-twirp-snippy-snippy' @ 1.0.4 rubygems as malicious. It is considered malicious because...