MAL-2023-1266 Malicious code in plain-function (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e38d4006afc6d5a3ce531ced341af81b57134a68230e68e52122825f587260e The OpenSSF Package Analysis project identified 'plain-function' @ 20.1.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in plain-function (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e38d4006afc6d5a3ce531ced341af81b57134a68230e68e52122825f587260e The OpenSSF Package Analysis project identified 'plain-function' @ 20.1.1 npm as malicious. It is considered malicious because: - The package...

Malicious Package

Overview plain-function is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

Regular Expression Denial of Service (ReDoS)

Overview sisimai is a Ruby library for analyzing RFC5322 bounce emails and generating structured data from parsed results. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS due to the usage of insecure regular expressions in the function toplain of the...

PT-2023-15902 · Sisimai · Sisimai

Name of the Vulnerable Software and Affected Versions: Sisimai versions up to 4.25.14p11 Description: A vulnerability has been found in the function to plain of the file lib/sisimai/string.rb, leading to inefficient regular expression complexity. The exploit has been disclosed to the public and m...