2334 matches found
MAL-2025-39902 Malicious code in xo-dione-wasat-palynology (npm)
The package xo-dione-wasat-palynology was found to contain malicious code...
MAL-2025-9525 Malicious code in @teamteanpm2024/incidunt-impedit-atque (npm)
The package @teamteanpm2024/incidunt-impedit-atque was found to contain malicious code...
MAL-2025-24081 Malicious code in juniper-ptlq0-eehu6-unicorn-project (npm)
The package juniper-ptlq0-eehu6-unicorn-project was found to contain malicious code...
MAL-2025-33912 Malicious code in standardwebappwebwebwebweb (npm)
The package standardwebappwebwebwebweb was found to contain malicious code...
MAL-2025-9522 Malicious code in @teamteanpm2024/fugiat-asperiores-placeat (npm)
The package @teamteanpm2024/fugiat-asperiores-placeat was found to contain malicious code...
MAL-2025-27345 Malicious code in new-al-bum-av-ailable-2017-84902-three-futures-eheyb-czhdsw (npm)
The package new-al-bum-av-ailable-2017-84902-three-futures-eheyb-czhdsw was found to contain malicious code...
Malicious code in 2o3t-eslint-config (npm)
The package 2o3t-eslint-config was found to contain malicious code...
MAL-2025-35813 Malicious code in test-mlw2-mouth-filet (npm)
The package test-mlw2-mouth-filet was found to contain malicious code...
Malicious code in alb-um-availa-ble-zip-mp3-file-9399-tigermilk-1am0w-pkhmun (npm)
The package alb-um-availa-ble-zip-mp3-file-9399-tigermilk-1am0w-pkhmun was found to contain malicious code...
MAL-2025-13853 Malicious code in @zittertea/architecto-cumque-incidunt (npm)
The package @zittertea/architecto-cumque-incidunt was found to contain malicious code...
MAL-2025-35076 Malicious code in test-mlw2-chows-yucas (npm)
The package test-mlw2-chows-yucas was found to contain malicious code...
MAL-2025-8805 Malicious code in @malware-test-natch-fifes-niefs-dumky/test-mlw3-natch-fifes-niefs-dumky (npm)
The package @malware-test-natch-fifes-niefs-dumky/test-mlw3-natch-fifes-niefs-dumky was found to contain malicious code...
Malicious code in @zittertea/minus-nisi-molestias-ipsa (npm)
The package @zittertea/minus-nisi-molestias-ipsa was found to contain malicious code...
Malicious code in @azix058/design-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 00076e3fa2882cf70c07ddb3715929161c6cd4253e088b91f38c06d9612e5edc The OpenSSF Package Analysis project identified '@azix058/design-system' @ 10.0.0 npm as malicious. It is considered malicious because: - The...
CVE-2023-21017
In InstallStart of InstallStart.java, there is a possible way to change the installer package name due to an improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
CVE-2023-21035
In multiple functions of BackupHelper.java, there is a possible way for an app to get permissions previously granted to another app with the same package name due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User...
Malicious code in test-hello-user-test-npm-com-test (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2019-15474
The Xiaomi Cepheus Android device with a build fingerprint of Xiaomi/cepheus/cepheus:9/PKQ1.181121.001/V10.2.6.0.PFAMIXM:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app versionCode=28, versionName=9 that allows unauthorized microphone aud...
CVE-2019-15468
The Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/daisy/daisysprout:9/PKQ1.180917.001/V10.0.3.0.PDLMIXM:user/release-keys contains a pre-installed app with a package name of com.huaqin.factory app versionCode=1, versionName=QL1715201812071953 that allows unauthorized wireles...