54291 matches found
Malicious code in redux-toolkit-rts (npm)
The package redux-toolkit-rts was found to contain malicious code...
Malicious code in relay-twilio (npm)
The package relay-twilio was found to contain malicious code...
Malicious code in node-logflow (npm)
The package node-logflow was found to contain malicious code...
Malicious code in example-backend (npm)
The package example-backend was found to contain malicious code...
MAL-2025-42026 Malicious code in morgan-logger (npm)
The package morgan-logger was found to contain malicious code...
Malicious code in schemacachiie (npm)
The package schemacachiie was found to contain malicious code...
Malicious code in cookies-logger (npm)
The package cookies-logger was found to contain malicious code...
Malicious code in tailwind-class-overrides (npm)
The package tailwind-class-overrides was found to contain malicious code...
Malicious code in tailwind-supabase (npm)
The package tailwind-supabase was found to contain malicious code...
Malicious code in playwright-test-plugin (npm)
The package playwright-test-plugin was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 1e6779c473c0002c40d1f6d528fa46cd14cea2ce164f86dc3d597743f2150df2 This package installs a dependency hosted on a custom domain that...
Malicious code in test-lwcs (npm)
The package test-lwcs was found to contain malicious code...
MAL-2025-42065 Malicious code in react-router-html (npm)
The package react-router-html was found to contain malicious code...
MAL-2025-42116 Malicious code in wealthsimple-mcp-server (npm)
The package wealthsimple-mcp-server was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 7cd49239ea1d9566f39581393c8553ea1a1733f9ddb3a6dfc09ef5ad0c507122 This package installs a dependency hosted on a custom domain that...
MAL-2025-42032 Malicious code in mycli123 (npm)
The package mycli123 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 709b10ff3e5a35f672b122eafa6232ae5ba3fef3cc80135a97f709fcd4f70320 This package installs a dependency hosted on a custom domain that runs an info...
MAL-2025-42024 Malicious code in metamask-api (npm)
The package metamask-api was found to contain malicious code...
MAL-2025-42095 Malicious code in tailwindcss-animate-ui (npm)
The package tailwindcss-animate-ui was found to contain malicious code...
CVE-2024-28080
creationtimestamp| type| source ---|---|--- 2025-08-29 08:28:59+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lxjnc5a2un2b 2025-08-29 08:39:32+00:00| seen| https://bsky.app/profile/r-netsec.bsky.social/post/3lxjnuyywif2r 2025-08-29 13:01:40+00:00| published-proof-of-concept|...
FormCms avatar upload feature has a stored cross-site scripting (XSS) vulnerability
FormCms v0.5.5 contains a stored cross-site scripting XSS vulnerability in the avatar upload feature. Authenticated users can upload .html files containing malicious JavaScript, which are accessible via a public URL. When a privileged user accesses the file, the script executes in their browser...
USN-7722-1: Linux kernel vulnerability
A security issues was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystem: - Network traffic control; CVE-2025-38350...