5970 matches found
DuckDB NPM packages 1.3.3 and 1.29.2 briefly compromised with malware
The DuckDB distribution for Node.js on npm was compromised with malware along with several other packages. An attacker published new versions of four of duckdb’s packages that included malicious code to interfere with cryptocoin transactions. The following packages and versions are affected: -...
MAL-2025-46993 Malicious code in @duckdb/node-bindings (npm)
The DuckDB Node.js package @duckdb/node-bindings version 1.3.3 was compromised with malware through a sophisticated phishing attack targeting the DuckDB maintainers. An attacker created a pixel-perfect copy of the npmjs.com website at npmjs.help domain and tricked a maintainer into logging in and...
Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware
This is a PoC exploit for CVE-2021-36260, a command injection vulnerability in the web server of some Hikvision product. The vulnerability allows an attacker to launch a command injection attack by sending malicious commands to the device. The exploit is implemented in Python and provides several...
drm/xe: Make dma-fences compliant with the safe access rules
...
CVE-2025-39673 ppp: fix race conditions in ppp_fill_forward_path
In the Linux kernel, the following vulnerability has been resolved: ppp: fix race conditions in pppfillforwardpath pppfillforwardpath has two race conditions: 1. The ppp-channels list can change between listempty and listfirstentry, as ppplock is not held. If the only channel is deleted in...
Malicious code in metalsmith-node-config-dotenv-safe-bellatrix (npm)
The package metalsmith-node-config-dotenv-safe-bellatrix was found to contain malicious code...
Malicious code in magnetosphere-dotenv-safe-optimize-css-assets-webpack-plugin-mineralogy (npm)
The package magnetosphere-dotenv-safe-optimize-css-assets-webpack-plugin-mineralogy was found to contain malicious code...
Malicious code in semantic-release-dotenv-safe-commitlint-node-sass (npm)
The package semantic-release-dotenv-safe-commitlint-node-sass was found to contain malicious code...
Malicious code in run-script-zephyr-dotenv-safe-bionics (npm)
The package run-script-zephyr-dotenv-safe-bionics was found to contain malicious code...
Malicious code in dotenv-safe-sedna-procyon-halley (npm)
The package dotenv-safe-sedna-procyon-halley was found to contain malicious code...
Malicious code in parsec-sociobiology-dotenv-safe-neutronstar (npm)
The package parsec-sociobiology-dotenv-safe-neutronstar was found to contain malicious code...
MAL-2025-45508 Malicious code in parsec-sociobiology-dotenv-safe-neutronstar (npm)
The package parsec-sociobiology-dotenv-safe-neutronstar was found to contain malicious code...
Malicious code in dotenv-safe-polaris-paleoanthropology-filament (npm)
The package dotenv-safe-polaris-paleoanthropology-filament was found to contain malicious code...
Malicious code in dotenv-safe-whitedwarf-castor-magnetar (npm)
The package dotenv-safe-whitedwarf-castor-magnetar was found to contain malicious code...
Malicious code in dotenv-safe-fusion-norma-joviology (npm)
The package dotenv-safe-fusion-norma-joviology was found to contain malicious code...
Malicious code in tailwindcss-tailwindcss-dotenv-safe-less-loader (npm)
The package tailwindcss-tailwindcss-dotenv-safe-less-loader was found to contain malicious code...
MAL-2025-44058 Malicious code in dotenv-safe-fusion-norma-joviology (npm)
The package dotenv-safe-fusion-norma-joviology was found to contain malicious code...
MAL-2025-43874 Malicious code in commitlint-pm2-proxima-dotenv-safe (npm)
The package commitlint-pm2-proxima-dotenv-safe was found to contain malicious code...