21039 matches found
Malicious code in grunt-spinner-janus-tool (npm)
The package grunt-spinner-janus-tool was found to contain malicious code...
Malicious code in tool-aquarius-terser-webpack-plugin-jekyll (npm)
The package tool-aquarius-terser-webpack-plugin-jekyll was found to contain malicious code...
MAL-2025-14783 Malicious code in archaeogenetics-nova-centauri-tool (npm)
The package archaeogenetics-nova-centauri-tool was found to contain malicious code...
MAL-2025-37043 Malicious code in tool-koa-technocracy-ariel (npm)
The package tool-koa-technocracy-ariel was found to contain malicious code...
MAL-2025-37637 Malicious code in ultra-tool-kit (npm)
The package ultra-tool-kit was found to contain malicious code...
MAL-2025-17512 Malicious code in content-cloud-validator-tool (npm)
The package content-cloud-validator-tool was found to contain malicious code...
MAL-2025-37039 Malicious code in tool-arcturus-luna-proxima (npm)
The package tool-arcturus-luna-proxima was found to contain malicious code...
MAL-2025-27333 Malicious code in neuromorphic-tool-multiverse-mineralogy (npm)
The package neuromorphic-tool-multiverse-mineralogy was found to contain malicious code...
MAL-2025-21999 Malicious code in grunt-spinner-janus-tool (npm)
The package grunt-spinner-janus-tool was found to contain malicious code...
MAL-2025-32560 Malicious code in run-script-astrophysics-tool-cosmochemistry (npm)
The package run-script-astrophysics-tool-cosmochemistry was found to contain malicious code...
MAL-2025-32064 Malicious code in remark-commitizen-sirius-css-loader (npm)
The package remark-commitizen-sirius-css-loader was found to contain malicious code...
MAL-2025-39497 Malicious code in ws-ui-tool (npm)
The package ws-ui-tool was found to contain malicious code...
MAL-2025-17104 Malicious code in cli-cressida-tool-supercluster (npm)
The package cli-cressida-tool-supercluster was found to contain malicious code...
MAL-2025-23081 Malicious code in impinj-is-tool (npm)
The package impinj-is-tool was found to contain malicious code...
CVE-2025-32004
Improper input validation in the Intel Edger8r Tool for some IntelR SGX SDK may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-20092
Uncontrolled search path for some Clock Jitter Tool software before version 6.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access...
Malicious Package
Overview iuz-64bit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for soci...
Malicious Package
Overview deltago4 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for socia...
AZL-66306 CVE-2025-8715 affecting package postgresql for versions less than 16.10-1
Improper neutralization of newlines in pgdump in PostgreSQL allows a user of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql meta-commands inside a purpose-crafted object name. The same attacks...
