Malicious code in nativescript-sd-camera (npm)

The package nativescript-sd-camera was found to contain malicious code...

Malware in nativescript-gainsight-px

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-19 Malicious code in nativescript-gainsight-px2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 12143d1c19f403559d49925266742f6b2ca75a3fda8ed195a4e0189bf64dce70 The OpenSSF Package Analysis project identified 'nativescript-gainsight-px2' @ 1.11.3 npm as malicious. It is considered malicious because: - Th...

Malicious code in nativescript-gainsight-px2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 12143d1c19f403559d49925266742f6b2ca75a3fda8ed195a4e0189bf64dce70 The OpenSSF Package Analysis project identified 'nativescript-gainsight-px2' @ 1.11.3 npm as malicious. It is considered malicious because: - Th...

Malicious code in nativescript-gainsight-px (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a623f285a8491c50ebbad0ad2a62988fbf68724329f6d7b0a7d30b1bf44ded73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@adobe/aio-app-scripts (>=0.6.0, <=2.3.0), @adobe/aio-cli (>=2.1.0, <=4.0.0) +21 more potentially affected by CVE-2020-28471 via properties-reader (>=2.0.0, <=2.1.1)

properties-reader NPM version =2.0.0, =0.6.0, =2.1.0, =1.0.0, =0.3.1, =1.0.3, =0.6.0, =1.7.0, =0.0.16, =2.0.0-alpha.0, =2.4.1-next.238, =2.0.0-RC1, =2.1.1-next.0, =2.1.1-next.0, =2.2.1-next.5, =2.1.1-next.0, =2.5.2-next.17 and more Source cves: CVE-2020-28471 Source advisory: OSV:GHSA-JXVF-M3X5-M...

@adobe/aio-app-scripts (>=0.6.0, <=2.3.0), @adobe/aio-cli (>=2.1.0, <=4.0.0) +21 more potentially affected by CVE-2020-28471 via properties-reader (>=2.0.0, <=2.1.1)

properties-reader NPM version =2.0.0, =0.6.0, =2.1.0, =1.0.0, =0.3.1, =1.0.3, =0.6.0, =1.7.0, =0.0.16, =2.0.0-alpha.0, =2.4.1-next.238, =2.0.0-RC1, =2.1.1-next.0, =2.1.1-next.0, =2.2.1-next.5, =2.1.1-next.0, =2.5.2-next.17 and more Source cves: CVE-2020-28471 Source advisory:...

Examples NativeScript - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Examples NativeScript published at the 'play' market has multiple vulnerabilities...