MAL-2025-46872 Malicious code in zenith-virtualreality-postgres-hydrogeology (npm)

The package zenith-virtualreality-postgres-hydrogeology was found to contain malicious code...

🔍 Vulners Lookup – augmented CVE reality

Vulners Lookup – augmented CVE reality. Yesterday, VulnCheck unveiled a prototype Chrome/Chromium plugin that highlights CVE identifiers on any website and shows a popup with vulnerability details, including whether the vulnerability is in the VulnCheck KEV an extended CISA KEV. The Vulners team...

CVE-2025-41392

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supplied data when parsing AR files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute...

AUTOVR: Automated UI Exploration for Detecting Sensitive Data Flow Exposures in Virtual Reality Apps

The rise of Virtual Reality VR has provided developers with an unprecedented platform for creating games and applications apps that require distinct inputs, different from those of conventional devices like smartphones. The Meta Quest VR platform, driven by Meta, has democratized VR app publishin...

Malicious code in bootstrap-areology-virtualreality-postcss (npm)

The package bootstrap-areology-virtualreality-postcss was found to contain malicious code...

Malicious code in xerxes-augmentedreality-membrane-chalk (npm)

The package xerxes-augmentedreality-membrane-chalk was found to contain malicious code...

Malicious code in augmentedreality-yakutsk-biohacking-seismology (npm)

The package augmentedreality-yakutsk-biohacking-seismology was found to contain malicious code...

Malicious code in com.microsoft.mixedreality.powerthermalnotification (npm)

The package com.microsoft.mixedreality.powerthermalnotification was found to contain malicious code...

Malicious code in com.microsoft.mixedreality.webrtc.samples (npm)

The package com.microsoft.mixedreality.webrtc.samples was found to contain malicious code...

Malicious code in com.microsoft.mixedreality.toolkit.standardassets (npm)

The package com.microsoft.mixedreality.toolkit.standardassets was found to contain malicious code...

Malicious code in luminescence-rollup-augmentedreality-geoarchaeology (npm)

The package luminescence-rollup-augmentedreality-geoarchaeology was found to contain malicious code...

Malicious code in com.microsoft.mixedreality.wlt.asa (npm)

The package com.microsoft.mixedreality.wlt.asa was found to contain malicious code...

Malicious code in com.microsoft.mixedreality.sceneunderstanding (npm)

The package com.microsoft.mixedreality.sceneunderstanding was found to contain malicious code...

Malicious code in eleventy-augmentedreality-npm-mira (npm)

The package eleventy-augmentedreality-npm-mira was found to contain malicious code...

Malicious code in dysonswarm-virtualreality-cypress-phoebe (npm)

The package dysonswarm-virtualreality-cypress-phoebe was found to contain malicious code...

Malicious code in com.microsoft.mixedreality.movingplatform (npm)

The package com.microsoft.mixedreality.movingplatform was found to contain malicious code...

Malicious code in com.microsoft.mixedreality.webrtc (npm)

The package com.microsoft.mixedreality.webrtc was found to contain malicious code...

Malicious code in express-whitedwarf-augmentedreality-cluster (npm)

The package express-whitedwarf-augmentedreality-cluster was found to contain malicious code...

Malicious code in com.microsoft.mixedreality.toolkit.extensions (npm)

The package com.microsoft.mixedreality.toolkit.extensions was found to contain malicious code...

Malicious code in file-alb-um-zip-new-mp3-5298-reality-1-rymoz-ptimcb (npm)

The package file-alb-um-zip-new-mp3-5298-reality-1-rymoz-ptimcb was found to contain malicious code...