Malicious Package

Overview bigops-storio-schematics is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

@activepieces/piece-google-gemini (0.1.6), @activepieces/piece-google-vertexai (0.1.2) +8 more potentially affected by CVE-2026-33750 via brace-expansion (>=2.0.0, <=2.0.2)

brace-expansion NPM version =2.0.0, =0.2.1, =1.16.0, =1.0.1, =0.0.20, =15.0.0 - fluid-webdriver 1.1.2 - nx-cargo 1.0.0-alpha.2 Source cves: CVE-2026-33750 Source advisory: SNYK:JS-BRACEEXPANSION-15789759...

4itech-schematics (>=11.3.0-2, <=11.7.0-5), @4itech/schematics (11.7.0) +71 more potentially affected by CVE-2026-33672 via picomatch (3.0.1)

picomatch NPM version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on picomatch and may be impacted: - 4itech-schematics =11.3.0-2, =10.0.0-alpha.1, =10.0.0-alpha.1, =10.0.0-alpha.1, =0.1700.0-rc.3, =0.1700.0-rc.3, =17.0.0-rc.3, =0.1700.0-rc.3,...

4itech-schematics (>=11.3.0-2, <=11.7.0-5), @4itech/schematics (11.7.0) +71 more potentially affected by CVE-2026-33672 via picomatch (3.0.1)

picomatch NPM version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on picomatch and may be impacted: - 4itech-schematics =11.3.0-2, =10.0.0-alpha.1, =10.0.0-alpha.1, =10.0.0-alpha.1, =0.1700.0-rc.3, =0.1700.0-rc.3, =17.0.0-rc.3, =0.1700.0-rc.3,...

Server-side Request Forgery (SSRF)

Overview @schematics/angular is a Schematics specific to Angular Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the request handling pipeline due to improper validation of user-controlled HTTP headers such as Host and X-Forwarded-. An attacker can redirec...

Malicious code in intershop-schematics4 (npm)

The package intershop-schematics4 was found to contain malicious code...

Malicious code in intershop-schematics (npm)

The package intershop-schematics was found to contain malicious code...

MAL-2025-23283 Malicious code in intershop-schematics (npm)

The package intershop-schematics was found to contain malicious code...

Malicious code in schematics-cli (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in al-schematics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa23abde2f15732ece6a95eca8e1692816abedb8fe470840b8d8fd6c1121f18d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in ngx-xtra-schematics

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in ngx-xtra-schematics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39fcb0686c6bf17f5a78d7827eaf93bcc16a57fc2f587d232b316e076cedaa0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8722 Malicious code in ngx-xtra-schematics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39fcb0686c6bf17f5a78d7827eaf93bcc16a57fc2f587d232b316e076cedaa0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

NVIDIA’s Stolen Code-Signing Certs Used to Sign Malware

Two of NVIDIA’s code-signing certificates were part of the Feb. 23 Lapsus$ Group ransomware attack the company suffered – certificates that are now being used to sign malware so malicious programs can slide past security safeguards on Windows machines. The Feb. 23 attack saw 1TB of data bleed fro...

Apple’s Ransomware Mess Is the Future of Online Extortion

This week, hackers stole confidential schematics from a third-party supplier and demanded $50 million not to release them...

Security Blueprints of Many Companies Leaked in Hack of Swedish Firm Gunnebo

In March 2020, KrebsOnSecurity alerted Swedish security giant Gunnebo Group that hackers had broken into its network and sold the access to a criminal group which specializes in deploying ransomware. In August, Gunnebo said it had successfully thwarted a ransomware attack, but this week it emerge...

OSINT for Avionics

One of the biggest challenges with avionics research is simply getting hold of equipment to work on. Current equipment is frighteningly expensive – think $100,000 and up for some components, reflecting the relatively short production run, high reliability requirement and significant certification...

Security Bulletin: A security vulnerability has been identified in Redis shipped with IBM Cloud Schematics (CVE-2017-15047)

Summary A security vulnerability has been identified in Redis shipped with IBM Cloud Schematics CVE-2017-15047 Vulnerability Details Title Security Bulletin: A security vulnerability has been identified in Redis shipped with IBM Cloud Schematics CVE-2017-15047 Summary Redis is used as a component...

Security Bulletin: A security vulnerability has been identified in NodeJS shipped with IBM Cloud Schematics (CVE-2017-14919)

Summary A security vulnerability has been identified in NodeJS shipped with IBM Cloud Schematics CVE-2017-14919 Vulnerability Details Title Security Bulletin: A security vulnerability has been identified in NodeJS shipped with IBM Cloud Schematics CVE-2017-14919 Summary NodeJS is shipped as a...

Security Bulletin: A security vulnerability has been identified in Go shipped with IBM Cloud Schematics (CVE-2017-15041, CVE-2017-15042)

Summary A security vulnerability has been identified in Go shipped with IBM Cloud Schematics CVE-2017-15041, CVE-2017-15042 Vulnerability Details Title Security Bulletin: A security vulnerability has been identified in Go shipped with IBM Cloud Schematics CVE-2017-15041, CVE-2017-15042 Summary Go...