2419 matches found
Malicious code in express-bunker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68139b9a62e1d546de6ce2e46d5203782dbf54f1af2edbd2b8f509528eb0f000 [email protected] ships a postinstall script that performs an HTTP GET to a hardcoded bare IP over plain HTTP...
Malicious Package
Overview dowloadeboksuperiorspiderman1marvelcollectionbydanslotttc3wo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection...
MAL-2026-10126 Malicious code in dowload_ebok_wrath_of_the_gods_by_j_robert_kennedy_61o88 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e394751a822cba7556f9b6676b531a472c7c113da4458970b242b42df9d88e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE CVE-2026-59948
Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, a maliciously crafted package from an untrusted repository other than Packagist.org or Private Packagist can cause Composer to write attacker-controlled files outside the vendor directory and outside the project...
CVE-2026-59948
Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, a maliciously crafted package from an untrusted repository other than Packagist.org or Private Packagist can cause Composer to write attacker-controlled files outside the vendor directory and outside the project...
CVE-2026-59948
Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, a maliciously crafted package from an untrusted repository other than Packagist.org or Private Packagist can cause Composer to write attacker-controlled files outside the vendor directory and outside the project...
CVE-2026-59948
Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, a maliciously crafted package from an untrusted repository other than Packagist.org or Private Packagist can cause Composer to write attacker-controlled files outside the vendor directory and outside the project...
CVE-2026-59948 Composer: Arbitrary file write outside vendor via malicious transitive package name
Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, a maliciously crafted package from an untrusted repository other than Packagist.org or Private Packagist can cause Composer to write attacker-controlled files outside the vendor directory and outside the project...
Malicious code in hello244b (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 641cbcb87d26ccab92d1273dd083f15fa88ba5dad915c148f6500789f4596e4a The OpenSSF Package Analysis project identified 'hello244b' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2026-7430 Malicious code in ureactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in chai-as-belonged (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7078 Malicious code in @jesusvizcaino2021/app-push-base (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7047 Malicious code in @athena-ui-components/pubsub-bridge (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9870 Malicious code in zwknum7 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zlam_lamb13300 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9389 Malicious code in wmwk2nobab (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9297 Malicious code in wandsworthproxyabcabc (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9269 Malicious code in wandsdock7wre22mod (RubyGems)
--- -= Per source details. Do not edit below this line.=-...