1702 matches found
MAL-2025-47824 Malicious code in phoenix-privacy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdec9e2a1102dc27688b95b7b25b6609f0805e7ae034f4d3fc1ae47dfe9c8baf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in phoenix-privacy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdec9e2a1102dc27688b95b7b25b6609f0805e7ae034f4d3fc1ae47dfe9c8baf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in phoenix-upper-funnel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63faa5490a7a15613381071d036657935856797ccd344b5cbc23f00075462078 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47825 Malicious code in phoenix-upper-funnel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63faa5490a7a15613381071d036657935856797ccd344b5cbc23f00075462078 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in rc-phoenix-tpp-upper-funnel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7339748c4b25b1fb792f426edc2468aea1f9a626a53d8b25a29b364b48165d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47826 Malicious code in rc-phoenix-tpp-upper-funnel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7339748c4b25b1fb792f426edc2468aea1f9a626a53d8b25a29b364b48165d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-59336
Luanox is a module host for Lua packages. Prior to 0.1.1, a file traversal vulnerability can cause potential denial of service by overwriting Phoenix runtime files. Package names like ../../package are not properly filtered and pass the validity check of the rockspec verification system. This...
CVE-2025-59336 Relative Path Traversal in Luanox
Luanox is a module host for Lua packages. Prior to 0.1.1, a file traversal vulnerability can cause potential denial of service by overwriting Phoenix runtime files. Package names like ../../package are not properly filtered and pass the validity check of the rockspec verification system. This...
Phoenix RowHammer Attack Bypasses Advanced DDR5 Memory Protections in 109 Seconds
A team of academics from ETH Zürich and Google has discovered a new variant of a RowHammer attack targeting Double Data Rate 5 DDR5 memory chips from South Korean semiconductor vendor SK Hynix. The RowHammer attack variant, codenamed Phoenix CVE-2025-6202, CVSS score: 7.1, is capable of bypassing...
PT-2025-38061
Name of the Vulnerable Software and Affected Versions: Luanox versions prior to 0.1.1 Description: Luanox is a module host for Lua packages. A file traversal vulnerability can cause a denial of service by overwriting Phoenix runtime files. Package names, such as ../../package, are not properly...
Phoenix: Rowhammer Attacks on DDR5 Memory
Mitigation AMD released updated Platform Initialization PI packages to the Original Equipment Manufacturers OEM for AMD Ryzen™ Series processors. These updates allow customers to enable Mixed Refresh Mode, which is an existing DRAM workaround to rowhammer-style attacks. Please contact your OEM fo...
MAL-2025-45790 Malicious code in rehype-phoenix-apollo-ceres (npm)
The package rehype-phoenix-apollo-ceres was found to contain malicious code...
Malicious code in ursa-phoenix-hadron-terser-webpack-plugin (npm)
The package ursa-phoenix-hadron-terser-webpack-plugin was found to contain malicious code...
Malicious code in technocracy-phoenix-vega-borealis (npm)
The package technocracy-phoenix-vega-borealis was found to contain malicious code...
Malicious code in rehype-phoenix-apollo-ceres (npm)
The package rehype-phoenix-apollo-ceres was found to contain malicious code...
Malicious code in framework-prompts-phoenix-cressida (npm)
The package framework-prompts-phoenix-cressida was found to contain malicious code...
Malicious code in phoenix-pipe-whitedwarf-meissa (npm)
The package phoenix-pipe-whitedwarf-meissa was found to contain malicious code...
Malicious code in phoenix-cygnus-forever-fermion (npm)
The package phoenix-cygnus-forever-fermion was found to contain malicious code...