6 matches found
devel_core (>=0.0.1, <=0.0.8) potentially affected by unknown CVE via requets (0.0.1-security)
requets NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requets and may be impacted: - develcore =0.0.1, =0.0.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32115...
MAL-2025-32115 Malicious code in requets (npm)
The package requets was found to contain malicious code...
Malicious code in requets (npm)
The package requets was found to contain malicious code...
Malicious code in requets-toolbelt (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6864037a883ed557f21693efb913b4429ca9b9bd71c7fdcaab7150c6084131fc Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
devel_core (>=0.0.1, <=0.0.8) potentially affected by unknown CVE via requets (0.0.1-security)
requets NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requets and may be impacted: - develcore =0.0.1, =0.0.8 Source cves: unknown CVE Source advisory: OSV:GHSA-F3PC-C2GF-HVGW...
GHSA-F3PC-C2GF-HVGW Malicious Package in requets
All versions of requets typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process w...