Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Embedded Malicious Code

Overview @nativescript-community/ui-collectionview is a package that allows you to easily add a collection view grid list view to your projects Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Malicious code in nativescript-sd-camera (npm)

The package nativescript-sd-camera was found to contain malicious code...

MAL-2025-27092 Malicious code in nativescript-sd-camera (npm)

The package nativescript-sd-camera was found to contain malicious code...

MAL-2025-19 Malicious code in nativescript-gainsight-px2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 12143d1c19f403559d49925266742f6b2ca75a3fda8ed195a4e0189bf64dce70 The OpenSSF Package Analysis project identified 'nativescript-gainsight-px2' @ 1.11.3 npm as malicious. It is considered malicious because: - Th...

Malicious code in nativescript-gainsight-px2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 12143d1c19f403559d49925266742f6b2ca75a3fda8ed195a4e0189bf64dce70 The OpenSSF Package Analysis project identified 'nativescript-gainsight-px2' @ 1.11.3 npm as malicious. It is considered malicious because: - Th...

Malicious code in nativescript-gainsight-px (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a623f285a8491c50ebbad0ad2a62988fbf68724329f6d7b0a7d30b1bf44ded73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@adobe/aio-app-scripts (>=0.6.0, <=2.3.0), @adobe/aio-cli (>=2.1.0, <=4.0.0) +21 more potentially affected by CVE-2020-28471 via properties-reader (>=2.0.0, <=2.1.1)

properties-reader NPM version =2.0.0, =0.6.0, =2.1.0, =1.0.0, =0.3.1, =1.0.3, =0.6.0, =1.7.0, =0.0.16, =2.0.0-alpha.0, =2.4.1-next.238, =2.0.0-RC1, =2.1.1-next.0, =2.1.1-next.0, =2.2.1-next.5, =2.1.1-next.0, =2.5.2-next.17 and more Source cves: CVE-2020-28471 Source advisory: OSV:GHSA-JXVF-M3X5-M...

@adobe/aio-app-scripts (>=0.6.0, <=2.3.0), @adobe/aio-cli (>=2.1.0, <=4.0.0) +21 more potentially affected by CVE-2020-28471 via properties-reader (>=2.0.0, <=2.1.1)

properties-reader NPM version =2.0.0, =0.6.0, =2.1.0, =1.0.0, =0.3.1, =1.0.3, =0.6.0, =1.7.0, =0.0.16, =2.0.0-alpha.0, =2.4.1-next.238, =2.0.0-RC1, =2.1.1-next.0, =2.1.1-next.0, =2.2.1-next.5, =2.1.1-next.0, =2.5.2-next.17 and more Source cves: CVE-2020-28471 Source advisory:...

Examples NativeScript - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Examples NativeScript published at the 'play' market has multiple vulnerabilities...