13120 matches found
Malicious code in style-loader-webpack-nightwatch-optimize-css-assets-webpack-plugin (npm)
The package style-loader-webpack-nightwatch-optimize-css-assets-webpack-plugin was found to contain malicious code...
MAL-2025-46255 Malicious code in terser-webpack-plugin-polaris-grus-gravity (npm)
The package terser-webpack-plugin-polaris-grus-gravity was found to contain malicious code...
Malicious code in @teasource/asperiores-error-dolor (npm)
The package @teasource/asperiores-error-dolor was found to contain malicious code...
MAL-2025-46493 Malicious code in utomo-telurtahu98-kyuki (npm)
The package utomo-telurtahu98-kyuki was found to contain malicious code...
Malicious code in react-milton (npm)
The package react-milton was found to contain malicious code...
MAL-2025-43775 Malicious code in checking-ip (npm)
The package checking-ip was found to contain malicious code...
MAL-2025-43892 Malicious code in copilotstudio-console (npm)
The package copilotstudio-console was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-46639 Malicious code in winston-datalog (npm)
The package winston-datalog was found to contain malicious code...
VulRTex: a Reasoning-Guided Approach to Identify Vulnerabilities from Rich-Text Issue Report
Software vulnerabilities exist in open-source software OSS, and the developers who discover these vulnerabilities may submit issue reports IRs to describe their details. Security practitioners need to spend a lot of time manually identifying vulnerability-related IRs from the community, and the...
ASB-A-384514657
In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible DoS of a device admin due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-353680402
In assertSafeToStartCustomActivity of AppRestrictionsFragment.java , there is a possible way to exploit a parcel mismatch resulting in a launch anywhere vulnerability due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. Us...
ASB-A-381419370
In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privilege due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation...
ASB-A-328182084
In setApplicationHiddenSettingAsUser of PackageManagerService.java, there is a possible way to hide a system critical package due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitatio...
ASB-A-419014146
In multiple methods of NotificationChannel.java, there is a possible desynchronization from persistence due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...
Malicious code in eslint-plugin-dummy (npm)
The package eslint-plugin-dummy was found to contain malicious code...
Malicious code in d360-web (npm)
The package d360-web was found to contain malicious code...
Malicious code in ganacche (npm)
The package ganacche was found to contain malicious code...
Malicious code in ganachhe (npm)
The package ganachhe was found to contain malicious code...