Malicious code in @hongfangze/verify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d21967c00c2a461014b34e6cbbda87d6aaa78c3058709e4b02f3125db3da56dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2025-27607

Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing dependency. This occurred because msgspec-python313-pre was deleted by the owner leaving the name open to being claimed by a third party...

Malicious code in another-depconf-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6876487b755ba50effc916826fdb407f0f653893569fef933deb61a21a8d6626 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ecpfs-react-jest-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 32b1e08557df6041c33ac4eaf0ebb0a3cdbc1bebeeb27b97321516cd0772898a The OpenSSF Package Analysis project identified 'ecpfs-react-jest-helpers' @ 2.0.1-v1 npm as malicious. It is considered malicious because: - Th...

Malicious code in old-package-name (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2017-13227

In the autofill service, the package name that is provided by the app process is trusted inappropriately. This could lead to information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2024-10579 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to the autofill service, where the package name provided by the app process is trusted inappropriately. This could lead to...

Malicious Package

Overview 123bla is a malicious package. This package contains malicious code and was removed from the package manager. Remediation Avoid using all malicious instances of the 123bla package...

Malicious code in mp3-file-zip-d-ownload-7517-goodbye-yellow-brick-road-h63vl-tpdnhx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ce58c2ac7b1825c26b2656020f588d8a223c04953287197e776979cc4f4f6ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mp3-do-wnload-file-to-day-46223-waltz-of-a-ghetto-fly-i2glp-eayvqc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca4db2ebb472113c9c8aed106f041fd82795a07008b23b13101e954888ffffc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in j5gnpfweguiwerbngpiutbgn0iutb0pfwfef (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 41b992b1717ae4c37710bfcb4b86d013ca8f3eb95dc9e06f47bdd813010db976 According to the description, packages should demonstrate the dependency confusion attack. The realisation is, in fact, a spamming with packages having as the...

Malicious code in confidential-package-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 22b6e399f6684509440f29b16a20c593cc1aee7a15e87f5263dfe847b6d7850a The OpenSSF Package Analysis project identified 'confidential-package-name' @ 99.9.9 npm as malicious. It is considered malicious because: - The...

Malicious code in @diotoborg/facere-nihil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff4b6c1d509cceb9ae4b8bde3da18d3563627bd1cbcef74b39b713c731b73843 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/inventore-amet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a167e9bff33e256be00eec29557f10a0762b6462aa9fb9b9cc4f7cb6e4a5ce4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/veniam-blanditiis-sit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34469c54bbb2466d900b7220fda3c343686a028f748eef61c9946ab7574a9bed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/esse-distinctio-repellat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2192f59a1cf8a429c8475c46961cbe262fd32f19e08bad830da50f3f9b7a1531 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/dolore-sint-deserunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 790550c0a4e07608018609aa42f77fe5db737e717766993d00c1b7d6fc1652b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/sed-minus-itaque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb45b582e8b298a507adb803923ffc28de729355d030dc4867e691f38f1f941f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/aliquam-perferendis-repudiandae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 831102f2b71323e750b75fd086e9f2bb993c6b0f34fb613d536d0d35bb4b7e28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/facere-cupiditate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9240e310e12ca4380af6dc349441e6f32e009c3b0c87a89d2e16170d54007a68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...