Lucene search
+L

17825 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added yesterday3 views

Malicious code in @ornikar/jest-config (npm)

npm/@ornikar/jest-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republishe...

5.8AI score
SaveExploits0References16
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday2 views

Malicious code in @ornikar/eslint-config-node (npm)

npm/@ornikar/eslint-config-node is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.7AI score
SaveExploits0References15
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday2 views

Malicious code in @ornikar/react-modern-calendar-datepicker (npm)

npm/@ornikar/react-modern-calendar-datepicker is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were...

5.8AI score
SaveExploits0References16
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday2 views

Malicious code in @ornikar/babel-preset-kitt-universal (npm)

npm/@ornikar/babel-preset-kitt-universal is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanize...

6.1AI score
SaveExploits0References15
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday4 views

Malicious code in @ornikar/postcss-config (npm)

npm/@ornikar/postcss-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.7AI score
SaveExploits0References16
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday2 views

Malicious code in @ornikar/eslint-config-react (npm)

npm/@ornikar/eslint-config-react is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.5AI score
SaveExploits0References16
Nuclei
Nuclei
added yesterday15 views

Rclone RC - Broken Access Control

Rclone = 1.45.0 and = 1.45.0 and 1.73.5 contains a broken access control vulnerability caused by unauthenticated access to the RC endpoint options/set allowing mutation of global runtime configuration, letting unauthenticated attackers access sensitive administrative functions, exploit requires R...

9.8CVSS7.6AI score0.32715EPSS
SaveExploits1References2
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday2 views

Malicious code in @servicetitan/assist-ui (npm)

npm/@servicetitan/assist-ui is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.8AI score
SaveExploits0References10
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday2 views

Malicious code in @servicetitan/install (npm)

npm/@servicetitan/install is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republish...

5.8AI score
SaveExploits0References10
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday3 views

Malicious code in @servicetitan/hammer-token (npm)

npm/@servicetitan/hammer-token is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.6AI score
SaveExploits0References12
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday2 views

Malicious code in @servicetitan/hammer-react (npm)

npm/@servicetitan/hammer-react is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.9AI score
SaveExploits0References12
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday2 views

Malicious code in @servicetitan/moneyout-api-client (npm)

npm/@servicetitan/moneyout-api-client is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized a...

6.3AI score
SaveExploits0References11
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday3 views

Malicious code in @servicetitan/marketing-integration-widgets (npm)

npm/@servicetitan/marketing-integration-widgets is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were...

5.9AI score
SaveExploits0References10
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday2 views

Malicious code in @servicetitan/form-state (npm)

npm/@servicetitan/form-state is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.7AI score
SaveExploits0References11
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday4 views

Malicious code in @servicetitan/datadog-rum (npm)

npm/@servicetitan/datadog-rum is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.5AI score
SaveExploits0References12
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday5 views

Malicious code in keyv (npm)

npm/keyv version 6.0.0 is a trojanized release published on 2026-08-04 during the compromise of the npm/GitHub maintainer account behind the keyv and cacheable package families user "Jaredwray". Attackers pushed the malicious payload to the source repository and cut releases through GitHub Action...

5.8AI score
SaveExploits0References6
OSV
OSV
added yesterday3 views

MAL-2026-11524 Malicious code in keyv (npm)

npm/keyv version 6.0.0 is a trojanized release published on 2026-08-04 during the compromise of the npm/GitHub maintainer account behind the keyv and cacheable package families user "Jaredwray". Attackers pushed the malicious payload to the source repository and cut releases through GitHub Action...

5.8AI score
SaveExploits0References6
OSV
OSV
added yesterday6 views

MAL-2026-11523 Malicious code in cache-manager (npm)

npm/cache-manager version 7.2.10 is a trojanized release published on 2026-08-04 during the compromise of the npm/GitHub maintainer account behind the keyv and cacheable package families user "Jaredwray". Attackers pushed the malicious payload to the source repository and cut releases through...

5.9AI score
SaveExploits0References6
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday5 views

Malicious code in cache-manager (npm)

npm/cache-manager version 7.2.10 is a trojanized release published on 2026-08-04 during the compromise of the npm/GitHub maintainer account behind the keyv and cacheable package families user "Jaredwray". Attackers pushed the malicious payload to the source repository and cut releases through...

5.9AI score
SaveExploits0References6
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday6 views

Malicious code in cacheable-request (npm)

npm/cacheable-request version 13.0.20 is a trojanized release published on 2026-08-04 during the compromise of the npm/GitHub maintainer account behind the keyv and cacheable package families user "Jaredwray". Attackers pushed the malicious payload to the source repository and cut releases throug...

5.7AI score
SaveExploits0References6
Rows per page
Query Builder