Malicious code in sdxcode1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e86442bd4bd6e2d95d5da4c3cf82c1961b38b57f4e51b8654d2d3398990dece Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in d4rk0nm3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fcd44fdf07755c2f5060eee6df68679af14c7bd6185b52853041856db638c7da The OpenSSF Package Analysis project identified 'd4rk0nm3' @ 1.0.6 npm as malicious. It is considered malicious because: - The package...

Malicious code in learning-kotlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5560da3fe5e63bf7da20ae1cd458fd7999e279367f07227ce8a6019ca497dc87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2059 Malicious code in subnplanmgmtserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41808cc4bbfb04af471b477a6c3bd56c1b9d5eba6fcc1572d6fda3ba46617d8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in subscriptionmgmtserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68c14d2b0dcadceb26623b66d1383bf38d46b5b9cccee3619f1cfe8cef942f4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in orchestration-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 446d1cd4d99a7dc69f63cc5747ff882ba95bd3db160f5d500fe1711be4897d7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in calculated_members_message (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5529e99d26fab951551b850892343db8270230c71da1a8091e2bca79559e37f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sonahri51/orientation-change-end (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4e5ffc2c48c12f6b36620be282c6ed94826d434430e8412d70a220d4719b366 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1672 Malicious code in dep-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 880d5ea6c43eb50d284249180eca08fc64f4f7efa0a1e1abaaf234acfce4b6d6 The OpenSSF Package Analysis project identified 'dep-poc' @ 1.0.3 npm as malicious. It is considered malicious because: - The package communicat...

Malicious code in nanovest-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17d16e1056fd5093195f09f1074b4a1e5832286639ad292adae94fb8fbb005eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ESRI ArcGIS Pro Untrustworthy Search Path Vulnerability

ESRI ArcGIS Pro is a powerful desktop GIS software from ESRI. An untrusted search path vulnerability exists in ESRI ArcGIS Pro, which can be exploited by an attacker to execute malicious commands...

Esri ArcGIS 安全漏洞

ESRI ArcGIS Pro is a powerful desktop GIS software from ESRI. An untrusted search path vulnerability exists in ESRI ArcGIS Pro, which can be exploited by an attacker to execute malicious commands...

Malicious code in twilio-realtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b685743691677bab2a820511e27dea13c5ce9441dbd97ca3a24dca0cb92a8a8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in archon2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2efbecb91840f3bd10abd707ee59f45fc25c310b59477444324c0d40c7e128bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1383 Malicious code in rust-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f080c05d4a8b07c42704d1ef9fb6f6d30d4128e3f5976f6645a3b8858cb10580 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hcpss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 544fee49e2faae06ce667fd2b9512d17da30686b4bfe050c4bd76c2d06166fa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-41157

A specific file on the sERP server if KyungrinaraERP solution has a fixed password with the SYSTEM authority. This vulnerability could allow attackers to leak or steal sensitive information or execute malicious commands...

CVE-2020-6192

SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious commands with root privileges in SAP Host Agent via SAP Landscape Management...

CVE-2024-6331

stitionai/devika main branch as of commit cdfb782b0e634b773b10963c8034dc9207ba1f9f is vulnerable to Local File Read LFI by Prompt Injection. The integration of Google Gimini 1.0 Pro with HarmBlockThreshold.BLOCKNONE for HarmCategory.HARMCATEGORYHATESPEECH and HarmCategory.HARMCATEGORYHARASSMENT i...

Malicious code in digitalexp-datasource-definitions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36663c1c097e4ad0179af75313622f87a6e8b4c1ccd10cf2d93e5a505e4c2985 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...