Malicious code in meta-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 547b8b6ba1bfaeea42d8fe67ea9de77d254833b3f66166a437ec024f17fe24eb The OpenSSF Package Analysis project identified 'meta-gateway' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-461 Malicious code in godaddy-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4fc05cc5d0552c5e553e3f25b83917c1f80d321380c8c4243a72a984acda3e6f The OpenSSF Package Analysis project identified 'godaddy-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in coinbase-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f4e4f2061ccb606d0bc83d4dcdce6ed72c6c42f033fa0850cdc08d5e4cb50681 The OpenSSF Package Analysis project identified 'coinbase-test' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

CVE-2025-23698

creationtimestamp| type| source ---|---|--- 2025-01-16 20:19:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv43ia6v72n 2025-01-17 00:38:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113840901500299046...

CVE-2025-22758

creationtimestamp| type| source ---|---|--- 2025-01-15 16:17:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfs632osyr2t 2025-01-15 16:55:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113833417336185930...

Malicious code in alchemy-web3-webpack-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0baf7db6925882a96eddaa00b4877f9147183d9b00a85fd69b02e5fe625f7ff7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-22363

creationtimestamp| type| source ---|---|--- 2025-01-07 17:16:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf65o74vip22 2025-01-07 18:53:53+00:00| seen| https://t.me/cvedetector/14571...

CVE-2025-22524

creationtimestamp| type| source ---|---|--- 2025-01-07 16:17:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf62fcwqvt2k 2025-01-07 17:37:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/475...

Malicious code in baby-loris (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9155edd098ee3fed04541b192087704f5a42b1f149bdd0f4f487d7e0ae941870 The OpenSSF Package Analysis project identified 'baby-loris' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

CISCO-SA-20190717-SPA500

creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:45+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666793582617916...

CVE-2023-37599

creationtimestamp| type| source ---|---|--- 2024-12-09 08:20:48+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-37599.yaml 2026-07-29 12:00:17+00:00| seen| https://t.me/CVEhub/16749 2026-07-30 00:00:35+00:00| seen| https://t.me/CVEhub/16749...

Malicious code in private-lib-bug-bounty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ef8c8e73b8b4d3414d06cadfd08f308a41276fe31204d26bc85d1eb566c4923c The OpenSSF Package Analysis project identified 'private-lib-bug-bounty' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in vue-midata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc06ec1e2eb7c0a1bd2a27e81568ad8ee48c80f63b74284118e768a9740222e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-12000

creationtimestamp| type| source ---|---|--- 2024-11-30 12:00:53+00:00| seen| https://infosec.exchange/users/cve/statuses/113571794336079178 2024-11-30 22:25:58+00:00| seen| https://t.me/cvedetector/11699...

Unspecified vulnerability in Linux kernel (CNVD-2024-46429)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the fact that placing packets into a dql queue after the dma engine has been started can result in a...

Unspecified vulnerability in Linux kernel (CNVD-2024-46414)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unpacked kmalloccachenoprof.No details of the vulnerability are provided at this time...

Malicious code in spex-node-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a39b71a7706221a863e8129674f28f4e5a1aec4ad4dfca5cdb243a0a4916901 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cljs-dopeloop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9232bb9421a218946057ab6688d62120e80b911ca38062d0ae6c42a951d2cddd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deriv-app-id-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c03deb9ccf8f604f4e3ba191f6d8c2e3f94cc273950f13aafde768a468f13071 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shot2story (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b1cb3804872d11b7f51bfc5588086dcdf5d8b68905b353e7b619ce55bfdf28a0 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...