13120 matches found
MAL-2025-46018 Malicious code in shenmixue-tianqi (npm)
The package shenmixue-tianqi was found to contain malicious code...
MAL-2025-46560 Malicious code in wasat-webdriver-mocha-command-wezen (npm)
The package wasat-webdriver-mocha-command-wezen was found to contain malicious code...
MAL-2025-44440 Malicious code in glade_ux87k_lu4wz_plume (npm)
The package gladeux87klu4wzplume was found to contain malicious code...
MAL-2025-43446 Malicious code in andi-pisang59-breki (npm)
The package andi-pisang59-breki was found to contain malicious code...
Malicious code in react-milton (npm)
The package react-milton was found to contain malicious code...
MAL-2025-43892 Malicious code in copilotstudio-console (npm)
The package copilotstudio-console was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-46639 Malicious code in winston-datalog (npm)
The package winston-datalog was found to contain malicious code...
MAL-2025-43775 Malicious code in checking-ip (npm)
The package checking-ip was found to contain malicious code...
VulRTex: a Reasoning-Guided Approach to Identify Vulnerabilities from Rich-Text Issue Report
Software vulnerabilities exist in open-source software OSS, and the developers who discover these vulnerabilities may submit issue reports IRs to describe their details. Security practitioners need to spend a lot of time manually identifying vulnerability-related IRs from the community, and the...
ASB-A-328182084
Bulletin has no description...
ASB-A-384514657
Bulletin has no description...
ASB-A-419014146
Bulletin has no description...
ASB-A-381419370
In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation...
ASB-A-353680402
In assertSafeToStartCustomActivity of AppRestrictionsFragment.java , there is a possible way to exploit a parcel mismatch resulting in a launch anywhere vulnerability due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. Us...
Malicious code in sqrt_module (npm)
The package sqrtmodule was found to contain malicious code...
Malicious code in eslint-plugin-dummy (npm)
The package eslint-plugin-dummy was found to contain malicious code...
Malicious code in ganacche (npm)
The package ganacche was found to contain malicious code...
Malicious code in ganachhe (npm)
The package ganachhe was found to contain malicious code...