CVE-2020-12750

An issue was discovered on Samsung mobile devices with Q10.0 software. Attackers can bypass Factory Reset Protection FRP via SPEN. The Samsung ID is SVE-2020-17019 May 2020...

Malicious code in yunxohang6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 330a33730fe31c0ddee057fe9fa709d90447db3692211537a9570f70451e64a6 The package yunxohang6 was found to contain malicious code. Source: ghsa-malware 3f00c325c438e731f2f5c0a66e4135cf7e682994875cdc4e2df8dbffbdb299f6 Any...

MAL-2026-149 Malicious code in bnia-work (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f78b12fa102dbd32d8d3a27c016f7b790124a3a73bdf1970768799e120183c30 The package bnia-work was found to contain malicious code. Source: ghsa-malware 2583fa3177342feb8975727c7ad5873d1a1e7bea2ce3ce445343aaa9a0b3459b Any...

Malicious code in scrollbar-stylecss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1feac6b077daf292c9f1be24ff5b49cfd07da882dda73a98dcba56ea0a4c903 The package scrollbar-stylecss was found to contain malicious code. Source: ghsa-malware...

CVE-2025-1161

Incorrect Use of Privileged APIs vulnerability in NomySoft Information Technology Training and Consulting Inc. Nomysem allows Privilege Escalation.This issue affects Nomysem: through May 2025...

Malicious code in @nestor_hexom/garfield1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e97b74c49ae069dbe34f9d8305d62eed7e381a2ee48bfe60938f1b90b3ce7db The package @nestorhexom/garfield1 was found to contain malicious code. Source: ghsa-malware...

MAL-2026-119 Malicious code in klywarns (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 933b7d6c7fb14a0375e83aafab601053676b49f24851d2c8d2ca0b42f4ccd517 The package klywarns was found to contain malicious code. Source: ghsa-malware 0fd557abca883cf56c7a2f4c1b67ff5b64577d170103a99df6a39a991bcd34c1 Any...

MAL-2026-101 Malicious code in openblox-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f413a269bb13d7fc0f06d193b4b314762c1418948658dbcce7b416b6cc4e3d4 The package openblox-ts was found to contain malicious code. Source: ghsa-malware 60eca5ca78ef4e2c970e29512a0387609b154359d54bbc1a73473275777615c5 An...

Malicious code in x-clients-features (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419d018f4db7282c5ea456563704c47d16246b1836a54f60696da59cb05cad04 The package x-clients-features was found to contain malicious code. Source: ghsa-malware...

Malicious code in okta-loginpage-render (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48116f31c0b827072f94f6157837d2fcb3be3c6a9985584328216403280bd6bb The package okta-loginpage-render was found to contain malicious code. Source: ghsa-malware...

MAL-2026-92 Malicious code in okta-loginpage-render (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48116f31c0b827072f94f6157837d2fcb3be3c6a9985584328216403280bd6bb The package okta-loginpage-render was found to contain malicious code. Source: ghsa-malware...

Malicious code in cp_amm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e71dacd7a89bbff73298cd870eab40b71d5fdf8a2ffbec74c772cbc4e6f1026 The package cpamm was found to contain malicious code. Source: ghsa-malware c2bf6dfc9b717408c1e17976ef3ecb5193dd73340f2d3a60f85d114b24c81c4e Any...

MAL-2026-74 Malicious code in cp_amm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e71dacd7a89bbff73298cd870eab40b71d5fdf8a2ffbec74c772cbc4e6f1026 The package cpamm was found to contain malicious code. Source: ghsa-malware c2bf6dfc9b717408c1e17976ef3ecb5193dd73340f2d3a60f85d114b24c81c4e Any...

Malicious code in chai-as-required (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d4e11cf62bfc3ebf38053f2a9100239db0bc6e3069a4cd202f4469c5095cacf The package chai-as-required was found to contain malicious code. Source: ghsa-malware 6fc3ec9f20ee6a20fa8c22b25629b78558ca88fca81f4b25f414ad2eb13dcb...

MAL-2026-69 Malicious code in n8n-performance-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff33e7eec92ad0ad734fb7babcf427a9a5df69ba94b95c904c1ecfce32d5ef97 The package n8n-performance-metrics was found to contain malicious code. Source: ghsa-malware...

GHSA-HQF9-8XV5-X8XW ERC7984ERC20Wrapper: once a wrapper is filled, subsequent wrap requests do not revert and result in loss of funds.

Impact The ERC7984 contract tracks total supply using a confidential euint64 value. If a call to the internal mint function would result in the total supply overflowing, the call fails silently. The wrap and onTransferReceived functions in ERC7984ERC20Wrapper assume that mint won't fail silently...

MAL-2025-193009 Malicious code in @polystream/streaming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e62a67308730d0ecc50d157d59a1b39a5786f27c611739f3b02642211d3cda The package @polystream/streaming was found to contain malicious code. Source: ghsa-malware...

Malicious code in @ptest2535/ui-core_mal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7628a65ea5a9b366c3df0045c4c0a1c8b44ec278dc10792f971ed266fe08ce5a The package @ptest2535/ui-coremal was found to contain malicious code. Source: ghsa-malware...

Malicious code in @ptest2535/artifactory-demo-ptest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 179d121743e4ae61b32780c6a0ea72f57b23796b21513e57f998da725dd49318 The package @ptest2535/artifactory-demo-ptest was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192980 Malicious code in @ptest2535/l_woker_mal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4196b81679a34023da03dc65cd5831c81e6c9d66d1a3617113d28a85b23c83c The package @ptest2535/lwokermal was found to contain malicious code. Source: ghsa-malware...