Malicious code in vault-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c39e1eed1d8bf3442c38c8963d7e9aae31825a734eec63405aa146da7a02b57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in google-youtube (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e1ecb598c9ac0e7240a341182e2f54597b4789e72942b075021ced9bf81aef35 The OpenSSF Package Analysis project identified 'google-youtube' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in dave-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5c5e4c9469fec2d35256dcb0afcf57d63e6cfcf6ef685cf0f916f05cedc34c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eqbank (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1cb4c6c3534c2743f4bda73f51a773076db5813a4a72f7117d73feb0475ce70c The OpenSSF Package Analysis project identified 'eqbank' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicate...

Malicious code in sony-liv-smarttv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 61696a41d9c61203ebde9adcecf521e954619c6273e75d9da24c9f402aaeb603 The OpenSSF Package Analysis project identified 'sony-liv-smarttv' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in @johndeere-tech/helios-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99b3379997f7c1fa963e3f0022064669ccae41425799fd8d62cbcda0d2d01651 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-45482

CVE-2024-45482 concerns the B&R APROL product. The SSH server in APROL versions prior to 4.4-00P1 may allow an authenticated local attacker from a trusted remote server to execute malicious commands due to an Inclusion of Functionality from an Untrusted Control Sphere vulnerability. Affected prod...

Malicious code in my-signature (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e0bbf0594c1ce65a05bd238b874f3af6810ddb8729b2f913150d08d07f6a323 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2561 Malicious code in chatbot-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5af371ce3024a5ed217ff2baf8b2a9443cf92ae8a1993552e3679be6f83698a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

编号撤回

PandasAI is a data processing application that combines Pandas, a data manipulation and analysis library, with AI, allowing users to interact with data through natural language without having to write complex code. PandasAI has a command injection vulnerability that can be exploited by an attacke...

MAL-2025-2542 Malicious code in tag-soup-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c6f3d943d58e767428be21a9044b8969fbf56027da115be523bd13e0af23d36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Unpatched Windows Zero-Day Flaw Exploited by 11 State-Sponsored Threat Groups Since 2017

An unpatched security flaw impacting Microsoft Windows has been exploited by 11 state-sponsored groups from China, Iran, North Korea, and Russia as part of data theft, espionage, and financially motivated campaigns that date back to 2017. The zero-day vulnerability, tracked by Trend Micro's Zero...

Malicious code in devpod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53e6f3bff0bcab911305fc515a84c7ccd5f1389e8e57f1ba667bdd5c24b19ce1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in specialist-pwm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19a9361debaeefca0fe9ce58993642683389ef781840fbeabd2a00fb2b1d6477 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2292 Malicious code in hybrid-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eac5872f7c58c6dc0aa16876689ec20891753358c36a7a1c35c223e3d3f9cf38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2232 Malicious code in cb4good (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c16e1ebf21c15491517654d93507f4ac7ca8aa96e47403f10fd753ef7bcbca95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Restaurant Table Booking System /admin/check_availability.php File SQL Injection Vulnerability

Restaurant Table Booking System is a restaurant table reservation system. Restaurant Table Booking System suffers from a SQL injection vulnerability that originates from an incorrect operation of the parameter username in the /admin/checkavailability.php file, which can lead to SQL injection. An...

MAL-2025-2208 Malicious code in evil_gem (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e1cbacc9bc6d36bcde7b6cb93df89df1fae5c8f70a841dc916a8ba6cdad2ff95 The OpenSSF Package Analysis project identified 'evilgem' @ 0.1.0 rubygems as malicious. It is considered malicious because: - The package...

Malicious code in tommyboytesting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 264f52ff2f35da38715922f14fbd4a8a2fb8ea31fd56fdbffd735b410b7bfc2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in idme-component-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1194c5ee341dd44fccad1c3e2a9d698dd452b384ab16498ae5b59a40f00787a7 The OpenSSF Package Analysis project identified 'idme-component-utilities' @ 1.0.1 npm as malicious. It is considered malicious because: - The...