12952 matches found
Malicious code in @navify-platform/auth (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in @stackgl/gl-conformance (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6402e01df0460d9b2d3778bed73dc61d60fc700196a3bb56a2e91768227f3391 The OpenSSF Package Analysis project identified...
CVE-2025-51606
hippo4j 1.0.0 to 1.5.0, uses a hard-coded secret key in its JWT JSON Web Token creation. This allows attackers with access to the source code or compiled binary to forge valid access tokens and impersonate any user, including privileged ones such as "admin". The vulnerability poses a critical...
Malicious code in svcmanagement (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7b2d49c3d45535d0e8d20f097496169af472ef9fe2612c83823102820542590e Package attempts to download an executable and install it as a privileged service. The executable seems to be modified remote access tool --- Category: MALICIO...
Linux Distros Unpatched Vulnerability : CVE-2021-20190
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from thi...
Malicious code in vite-plugin-vue-extend-plugin (npm)
The package communicates with a domain associated with malicious activity...
Linux Distros Unpatched Vulnerability : CVE-2025-40924
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Catalyst::Plugin::Session before version 0.44 for Perl generates session ids insecurely. The session id is generated from a usually SHA-1 hash of a simple...
Malicious code in bashlog (npm)
The package bashlog was found to contain malicious code...
Malicious code in centered (npm)
The package centered was found to contain malicious code...
Malicious code in mvvmrx (npm)
The package mvvmrx was found to contain malicious code...
Malicious code in erwin-sambalado45-sukiwir (npm)
The package erwin-sambalado45-sukiwir was found to contain malicious code...
Malicious code in toutouda (npm)
The package toutouda was found to contain malicious code...
Malicious code in calotescu (npm)
The package calotescu was found to contain malicious code...
Malicious code in @zalastax/nolb-_p_ (npm)
The package @zalastax/nolb-p was found to contain malicious code...
Malicious code in test-mlw2-hippy-minim (npm)
The package test-mlw2-hippy-minim was found to contain malicious code...
Malicious code in generator-sglk (npm)
The package generator-sglk was found to contain malicious code...
Malicious code in down-lo-ad-now-zip-mp3-114887-here-from-where-we-are-16l6t-tyjpcw (npm)
The package down-lo-ad-now-zip-mp3-114887-here-from-where-we-are-16l6t-tyjpcw was found to contain malicious code...
Malicious code in cscribe (npm)
The package cscribe was found to contain malicious code...