Malicious code in topaz-hill-jsi445-project (npm)

The package topaz-hill-jsi445-project was found to contain malicious code...

MAL-2025-21753 Malicious code in gorge-topaz-ptp670-project (npm)

The package gorge-topaz-ptp670-project was found to contain malicious code...

MAL-2025-27109 Malicious code in nautilus-topaz-bxb497-project (npm)

The package nautilus-topaz-bxb497-project was found to contain malicious code...

MAL-2025-37057 Malicious code in topaz-elephant-qhp101-project (npm)

The package topaz-elephant-qhp101-project was found to contain malicious code...

MAL-2025-39355 Malicious code in wisp-topaz-vhf135-project (npm)

The package wisp-topaz-vhf135-project was found to contain malicious code...

MAL-2025-27202 Malicious code in nectar-topaz-wvj421-project (npm)

The package nectar-topaz-wvj421-project was found to contain malicious code...

MAL-2025-36476 Malicious code in test-mlw2-topaz-twier-juked-bored (npm)

The package test-mlw2-topaz-twier-juked-bored was found to contain malicious code...

MAL-2025-40329 Malicious code in yard-topaz-vev495-project (npm)

The package yard-topaz-vev495-project was found to contain malicious code...

MAL-2025-37070 Malicious code in topaz-vortex-usk262-project (npm)

The package topaz-vortex-usk262-project was found to contain malicious code...

MAL-2025-37062 Malicious code in topaz-hill-yeo717-project (npm)

The package topaz-hill-yeo717-project was found to contain malicious code...

MAL-2025-37069 Malicious code in topaz-vista-kth544-project (npm)

The package topaz-vista-kth544-project was found to contain malicious code...

MAL-2025-37059 Malicious code in topaz-glade-gfb040-project (npm)

The package topaz-glade-gfb040-project was found to contain malicious code...

MAL-2025-37054 Malicious code in topaz-aspen-kcg868-project (npm)

The package topaz-aspen-kcg868-project was found to contain malicious code...

CVE-2022-43430

Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

CVE-2022-43422

Jenkins Compuware Topaz Utilities Plugin 1.0.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process...

CVE-2022-43428

Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process...

CVE-2022-43429

Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to read arbitrary files on the Jenkins controller file system...

CVE-2022-36895

A missing permission check in Jenkins Compuware Topaz Utilities Plugin 1.0.8 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins...

CVE-2022-43427

Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

Topaz Signature Pad as COM Port Device Disappears after Logoff

Topaz Signature will disappear after users log off on a kiosk workstation. The environment contained: Citrix Virtual Apps and Desktops version 2203 CUx Desktop of Server VDA, any supported OS Citrix Workspace App 2402 CUx Windows 10/Windows 11...