11076 matches found
MAL-2025-191528 Malicious code in telesis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5acbf28efb6fa8452a846fc5d9517c32242464a4add69649d72a465b7f48ee60 The package telesis was found to contain malicious code...
MAL-2025-191509 Malicious code in debug-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88f2a76a5ede2df04c7d9b90d9fe0164f99a388aaf4ba018dc9b40f2b794d967 The package debug-common was found to contain malicious code...
EUVD-2025-200010
Malicious code in m365-action-sdk npm...
MAL-2025-191502 Malicious code in pluxee-design-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701f52cd229baaf8a44c372915a6bdbcc5510c156fb75c21d23c932d51ccde2f The package pluxee-design-system was found to contain malicious code. Source: ghsa-malware...
MAL-2025-191582 Malicious code in react-mandes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8242aeb2b6b10985e7b4c0a35cb731d81095b7f039aea2886d0c4c35ffa5d9ea The package react-mandes was found to contain malicious code...
MAL-2025-191574 Malicious code in eslint-lodash (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e5339ebcf037bec59b58b4622230d6f22619a009685877e469b566e883248a The package eslint-lodash was found to contain malicious code...
CVE-2025-13806
creationtimestamp| type| source ---|---|--- 2025-12-01 04:33:49+00:00| seen| https://infosec.exchange/users/offseq/statuses/115642441906765257...
CVE-2025-66027
creationtimestamp| type| source ---|---|--- 2025-11-29 10:33:39+00:00| seen| https://infosec.exchange/users/offseq/statuses/115632532223407853...
CVE-2025-13742
creationtimestamp| type| source ---|---|--- 2025-11-27 12:51:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6mfvwpiba2s...
CERTFR-2025-ACT-051
creationtimestamp| type| source ---|---|--- 2025-11-27 09:18:51+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115620913416794951...
PT-2025-48241
Name of the Vulnerable Software and Affected Versions Apache SkyWalking versions prior to 10.3.0 Description The software contains an Improper Neutralization of Script-Related HTML Tags in a Web Page issue, also known as a Basic Cross-Site Scripting XSS flaw. This allows attackers to inject...
CVE-2025-66035
creationtimestamp| type| source ---|---|--- 2025-11-26 23:17:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6kyg7f3d42u 2025-11-27 02:23:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m6lctzvqqy2s 2025-11-27 22:22:55+00:00| seen|...
CVE-2025-64335
Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64data. This issue has been patched in...
CVE-2025-50433
creationtimestamp| type| source ---|---|--- 2025-11-26 23:03:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6kxnvqcmi2s...
EUVD-2025-199395
Malicious code in @voiceflow/react-chat npm...
EUVD-2025-199382
Malicious code in @voiceflow/tsconfig-paths npm...
EUVD-2025-199415
Malicious code in @voiceflow/exception npm...
EUVD-2025-199378
Malicious code in @voiceflow/vitest-config npm...