2332 matches found
CVE-2026-59948
Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, a maliciously crafted package from an untrusted repository other than Packagist.org or Private Packagist can cause Composer to write attacker-controlled files outside the vendor directory and outside the project...
CVE-2026-59948 Composer: Arbitrary file write outside vendor via malicious transitive package name
Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, a maliciously crafted package from an untrusted repository other than Packagist.org or Private Packagist can cause Composer to write attacker-controlled files outside the vendor directory and outside the project...
CVE-2026-59948
Composer is a dependency Manager for the PHP language. Prior to 2.2.29 and 2.10.2, a maliciously crafted package from an untrusted repository other than Packagist.org or Private Packagist can cause Composer to write attacker-controlled files outside the vendor directory and outside the project...
MAL-2026-7430 Malicious code in ureactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7078 Malicious code in @jesusvizcaino2021/app-push-base (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7047 Malicious code in @athena-ui-components/pubsub-bridge (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9870 Malicious code in zwknum7 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zlam_lamb13300 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9389 Malicious code in wmwk2nobab (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9297 Malicious code in wandsworthproxyabcabc (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9269 Malicious code in wandsdock7wre22mod (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tmpfjbgghjfcigl (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in slnmodtestabc (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in slnccduioc (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in slnccbvjvj (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in sgjqdnyybe (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in qagfypuewln (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8351 Malicious code in oaitsvnxpamle (RubyGems)
--- -= Per source details. Do not edit below this line.=-...