225567 matches found
Malicious code in equivalent_dove_z3n (npm)
Source: amazon-inspector e1573034cb16288116a4d9db1992c47f005cf642fc36aa22b2e52c04769993ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in enceladus-stream-chai-loglevel (npm)
Source: amazon-inspector 8a963320fc9701dd9f33123eca2220399517e38a891994d0bbc0ab226aabcf31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in eko-taiwan59-breki (npm)
Source: amazon-inspector de7581b1fb6269e51c8fe5f19acb4d0d598b9477c6c4db1cec74566306756301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in eka-gulai21-miaww (npm)
Source: amazon-inspector 4e4c261f6564beff2ae8939a75dfc2aa2b8785399ff1f52944e7defd26aa3ad4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in @neroxkira/vangal-baileys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af1543fb92f079191de134bd36dbb64c340928804df8486acf43546e2c6e185 package.json declares libsignal with the source github:RILLYZY/libsignal-node, an unpinned reference to a third-party GitHub repository with no tag o...
CVE-2026-87995
Open WebUI versions 0.8.11 through 0.11.1 are affected by a same-origin XSS vulnerability in PortPreview.svelte. The terminal port content is rendered in an iframe sandbox that includes both allow-scripts and allow-same-origin. Because the terminal proxy serves content from the Open WebUI origin,...
CVE-2025-15690 Content Mask 1.7.1 - 1.8.5.5 - Contributor+ Stored XSS via Post Scripts and Styles
The Content Mask WordPress plugin before 1.8.5.6 does not properly sanitise and escape content submitted with a post before outputting it in the pages it generates, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks against any user viewing or previewi...
CVE-2025-15690
The Content Mask WordPress plugin (versions 1.7.1-1.8.5.5 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The flaw exists because the plugin fails to properly sanitise and escape content submitted via a post before it is outputted in generated pages. This allows users with a role as low as...
MAL-2026-16076 Malicious code in external_deps_enjoyer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4909b60251f0448ff7bc689262f363e3ec4c2cebf82abe3eb0c7f8769931a6 package.json declares dependencies and optionalDependencies whose specifiers point at non-registry, attacker-controlled or mutable sources rather tha...
Malicious code in external_deps_enjoyer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4909b60251f0448ff7bc689262f363e3ec4c2cebf82abe3eb0c7f8769931a6 package.json declares dependencies and optionalDependencies whose specifiers point at non-registry, attacker-controlled or mutable sources rather tha...
CVE-2026-6485
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...
AZL-99990 CVE-2026-6485 affecting package edk2 20240524git3e722403cd16-20
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...
CVE-2026-6485 UEFI BIOS embedded Shell can be used to bypass Secure Boot
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...
CVE-2026-6485 UEFI BIOS embedded Shell can be used to bypass Secure Boot
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...
EUVD-2026-74613
UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...
CVE-2026-6485
CVE-2026-6485 affects UEFI BIOS firmware that embeds the TianoCore EDK II UEFI Shell in SPI Flash. A logic error in the Shell boot option removal process allows an attacker with root privileges to create multiple boot entries, bypassing the Secure Boot check and gaining access to the Shell's phys...
Malicious code in bx-ui-view (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3874d2c55544bbbf59b6a60c3002b13e242fb53160a455597b13fdd37231f8 package.json declares a dependency whose key equals the package's own name bx-ui-view and whose value is a plain HTTPS URL...
MAL-2026-16064 Malicious code in bx-ui-view (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3874d2c55544bbbf59b6a60c3002b13e242fb53160a455597b13fdd37231f8 package.json declares a dependency whose key equals the package's own name bx-ui-view and whose value is a plain HTTPS URL...
