588 matches found
picklescan 安全漏洞
picklescan is a security scanning program by the individual developer Matthieu Maitre. A security vulnerability exists in versions of picklescan prior to 0.0.21, which stems from not treating pip as an insecure global variable, which could lead to a malicious model introducing a malicious PyPI...
Malicious code in apple-payment (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa58dd69fc5ac0761d5c5ce00fb9447675f6da6b04207194721048413e2c0e36 Any computer that has this package installed or running should be considered...
MAL-2024-12101 Malicious code in ing-feat-business-intermediary-lease-calculator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4ae63e9378c4493de34d242aa3a415d841799fe6e51f503848c1408c8dfe5e44 The OpenSSF Package Analysis project identified 'ing-feat-business-intermediary-lease-calculator' @ 1.1.0 npm as malicious. It is considered...
Malicious code in calc123lorc (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8694d9aee1895d2410aefdedcf0d8ca642301ed44085b3674a62856a4d4e42b2 Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...
Malicious code in soybean-admin-layout (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59a6972781b662382399d2ae9303fb5c9213e1d475062dcb8c096bc7b07589c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in snp-react-scripts (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in react-native-playstation (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ideological-peach-scallop (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in saml-helper (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2b054dba9521b1260174fa01f3f7ba51d88bd51e53c481675ed967271304a63f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in companyx-metaflow (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 ec7089679a9c5637609b94cb606e78aa693a8bd224ba334ca46b3f48c54169c1 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in telegram-bot_ruby (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in rack_envinspector (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in auto-localize (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in aptly-cli (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in airbrake-user_attributes_rails5 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in acts-as_better_tree (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in active-subset-validator (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in a-special_day (RubyGems)
--- -= Per source details. Do not edit below this line.=-...