11084 matches found
Malicious code in thoughtspot-rest-api-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in oca-pylint-plugin (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6373 Malicious code in redux-eslint-saga (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d08211092766c0313df71f1e2fe6fa8cf606e4f36570679a1391bda0a5dfd6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview postcss-minify-theme is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview notification-clients is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CISCO-SA-20040827-TELNET
creationtimestamp| type| source ---|---|--- 2025-07-30 02:45:32+00:00| seen| Telegram/Dnau3NRCe7OBfiMFOXh6vZ-unPpahT7b9zQDFEGsbPQsao...
PT-2025-31400
Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this issue, specifically...
Malicious Package
Overview @sys711/my-npx-tool is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in turborepo-tests-helpers (npm)
The package communicates with a domain associated with malicious activity...
GHSA-GQ52-6PHF-X2R6
creationtimestamp| type| source ---|---|--- 2025-07-26 02:35:24+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3lutjom5oa52b...
MAL-2025-6304 Malicious code in react-server-dom-turbopack-experimental (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 919b44a54d192c9600403c1ad155e8d4c1652c00f211b52d40f3b61893419ba9 Any computer that has this package installed or running should be considered...
CVE-2025-38405
creationtimestamp| type| source ---|---|--- 2025-07-25 13:40:58+00:00| seen| Telegram/xsyXu3QszE5xrv0xfvd4LV8XlZQdF4gMJCBMPMKZPq7GZ2U...
PT-2025-30892 · Commvault · Commvault
Name of the Vulnerable Software and Affected Versions: Commvault versions 11.32.0 through 11.32.93 Commvault versions 11.36.0 through 11.36.51 Commvault versions 11.38.0 through 11.38.19 Description: An SQL injection vulnerability exists in the Web Server component that could allow a remote,...
CVE-2025-2523
creationtimestamp| type| source ---|---|--- 2025-07-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-205-03 2025-07-24 16:04:38+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lupvxrav4i24 2025-09-04 10:00:00+00:00| seen|...
CVE-2025-7835
creationtimestamp| type| source ---|---|--- 2025-07-24 09:38:02+00:00| seen| Telegram/bDBSJULXH0Tp2NaTbw0xSfXu8p74yfsI5PxQFhuHXRlaY...
GHSA-4J66-8F4R-3PJX
creationtimestamp| type| source ---|---|--- 2025-07-24 05:10:24+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3luorfvupsb2w...
CVE-2025-46686
creationtimestamp| type| source ---|---|--- 2025-07-23 18:33:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114903980298033862 2025-07-23 21:12:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lunwoinpsi2j...
MAL-2025-6314 Malicious code in swap-token-list-poc (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff37669cef0c949bb0dd7b4eebab3d14891256532b09e265c1a486fb2ca0996c Any computer that has this package installed or running should be considered...