auto_exploiter

Auto-Exploiter Framework ⚠️ LEGAL DISCLAIMER — Authorised...

Malware in oci-console-plugin-registry

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview oci-console-plugin-registry is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in @zalastax/nolb-_phoenix-plugin-registry_x (npm)

The package @zalastax/nolb-phoenix-plugin-registryx was found to contain malicious code...

MAL-2025-10319 Malicious code in @zalastax/nolb-_phoenix-plugin-registry_w (npm)

The package @zalastax/nolb-phoenix-plugin-registryw was found to contain malicious code...

WS-2023-0318

Affected versions do not enforce a Sync bound on the type of caller-provided value held in the plugin registry. References to these values are made accessible to arbitrary threads other than the one that constructed them. A caller could use this flaw to submit thread-unsafe data into inventory,...

Exposes reference to non-Sync data to an arbitrary thread

Affected versions do not enforce a Sync bound on the type of caller-provided value held in the plugin registry. References to these values are made accessible to arbitrary threads other than the one that constructed them. A caller could use this flaw to submit thread-unsafe data into inventory,...

@phoenix-plugin-registry/hirse.ungit (0.8.3), hirse.ungit (>=0.4.1, <=0.8.3) potentially affected by CVE-2022-25766 via ungit (>=1.1.22, <=1.5.10)

ungit NPM version =1.1.22, =0.4.1, =0.8.3 Source cves: CVE-2022-25766 Source advisory: GHSA-HF8C-XR89-VFM5...

@phoenix-plugin-registry/hirse.ungit (0.8.3), hirse.ungit (>=0.4.1, <=0.8.3) potentially affected by CVE-2022-25766 via ungit (>=1.1.22, <=1.5.10)

ungit NPM version =1.1.22, =0.4.1, =0.8.3 Source cves: CVE-2022-25766 Source advisory: OSV:GHSA-HF8C-XR89-VFM5...

@phoenix-plugin-registry/hirse.ungit (0.8.3), hirse.ungit (>=0.1.0, <=0.8.3) potentially affected by CVE-2022-25766 via ungit (>=0.9.3, <=1.5.10)

ungit NPM version =0.9.3, =0.1.0, =0.8.3 Source cves: CVE-2022-25766 Source advisory: MEND:CVE-2022-25766...

@balljs/cli (>=0.0.1, <=0.0.4), @getcronit/pylon-dev (>=1.0.0-beta.1, <=1.0.6) +9 more potentially affected by unknown CVE via treekill (>=0.0.0, <=1.0.0)

treekill NPM version =0.0.0, =0.0.1, =1.0.0-beta.1, =0.0.34, =0.0.9-beta.1, =2.0.0-rc.13, =1.0.1, =1.0.3 Source cves: unknown CVE Source advisory: GHSA-533P-G2HQ-QR26...