19 matches found
MAL-2026-1932 Malicious code in react-native-international-phone-number (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f86d66bcbb0f2abf075d3d4ce6a18c3a8ec1563e35087a9fe409f56f9fb64a9f The package react-native-international-phone-number was found to contain malicious code. Source: ghsa-malware...
Embedded Malicious Code
Overview react-native-international-phone-number is an International mobile phone input component with mask for React Native Affected versions of this package are vulnerable to Embedded Malicious Code. The publishing pipeline of this package was compromised and a malicious version was released on...
Malicious code in @vietmoney/react-native-action-button (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df1a9f2c1ef7c8dd8ece133048315f8ab738a4d5d8bf1a11dbe5f932d39e2eca The package @vietmoney/react-native-action-button was found to contain malicious code. Source: ghsa-malware...
Malicious code in @actbase/react-native-kakao-channel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65c6154361619c2c8153e5a3035c559aafef406bd969d3178a240e0ed19d0a9a The package @actbase/react-native-kakao-channel was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190510 Malicious code in react-native-animated-shine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5050403e37c46819e95b4473ce0825d3dfe40bf8b41941ecd666e9b5048ffb14 The package react-native-animated-shine was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-176418
Malicious code in server-asteroid-foundation-native npm...
EUVD-2025-121114
Malicious code in triton-duplex-jsonp-native npm...
MAL-2025-43539 Malicious code in auriga-spectron-webdriver-nuxtjs-native (npm)
The package auriga-spectron-webdriver-nuxtjs-native was found to contain malicious code...
MAL-2025-34228 Malicious code in supervisor-spectroscopy-tardigrade-native (npm)
The package supervisor-spectroscopy-tardigrade-native was found to contain malicious code...
MAL-2025-21269 Malicious code in generator-accelerate-react-native (npm)
The package generator-accelerate-react-native was found to contain malicious code...
Malicious code in react-native-at-internet-example (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-4284 Malicious code in react-native-scrollpageviewtest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcee80fff21305590dcf04ace763231bdd81fcc2ef72bf8492ed79a60a17cd3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2836 Malicious code in arkose-labs-react-native-example (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in chunked-blob-reader-native (npm)
--- -= Per source details. Do not edit below this line.=-...
Mageia: Security Advisory (MGASA-2018-0150)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated tomcat packages fix security vulnerabilities
Updated tomcat packages fix security vulnerabilities: The HTTP/2 implementation accepted streams with excessive numbers of SETTINGS frames and also permitted clients to keep streams open without reading/writing request/response data. By keeping streams open for requests that utilised the Servlet...
Updated tomcat-native package fixes security vulnerability
When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the OCSP check. It was therefore possible for client certificates that should have been rejected if the OCSP check...
MGASA-2018-0150 Updated tomcat-native package fixes security vulnerability
When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native did not correctly handle fields longer than 127 bytes. The result of the parsing error was to skip the OCSP check. It was therefore possible for client certificates that should have been rejected if the OCSP check...
Updated tomcat packages fix security vulnerabilities
Updated tomcat packages fix security vulnerabilities: Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 7.x before 7.0.65 allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via a /.. slash dot dot in a pathname used b...