Malicious code in hw-tracking (npm)

The package hw-tracking was found to contain malicious code...

Malicious code in @berush/tracking-pixel (npm)

The package @berush/tracking-pixel was found to contain malicious code...

MAL-2025-7063 Malicious code in @amber-team/react-event-tracking (npm)

The package @amber-team/react-event-tracking was found to contain malicious code...

Malicious code in hw-performance-tracking (npm)

The package hw-performance-tracking was found to contain malicious code...

Malicious code in sp-tracking (npm)

The package sp-tracking was found to contain malicious code...

Malicious code in airbnb-tracking (npm)

The package airbnb-tracking was found to contain malicious code...

MAL-2025-22830 Malicious code in hw-tracking (npm)

The package hw-tracking was found to contain malicious code...

MAL-2025-14197 Malicious code in airbnb-tracking (npm)

The package airbnb-tracking was found to contain malicious code...

MAL-2025-28939 Malicious code in paychex-tracking (npm)

The package paychex-tracking was found to contain malicious code...

Malicious code in @amber-team/react-event-tracking (npm)

The package @amber-team/react-event-tracking was found to contain malicious code...

MAL-2025-7118 Malicious code in @berush/tracking-pixel (npm)

The package @berush/tracking-pixel was found to contain malicious code...

MAL-2025-33691 Malicious code in sp-tracking (npm)

The package sp-tracking was found to contain malicious code...

MAL-2025-22824 Malicious code in hw-performance-tracking (npm)

The package hw-performance-tracking was found to contain malicious code...

Malicious Package

Overview tblogduo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for socia...

Malicious Package

Overview tizdppz is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for social...

Malicious Package

Overview soonje22 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for socia...

Malicious Package

Overview setago2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for social...

Malicious Package

Overview njongtozon is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for...

User-defined implementations of the safe trait scratchpad::Tracking can cause heap buffer overflows

The get and set methods of the public trait scratchpad::Tracking interact with unsafe code regions in the crate, and they influence the computation of addresses returned as raw pointers. However, the trait itself is not marked as unsafe, meaning users may provide custom implementations under the...

RUSTSEC-2025-0049 User-defined implementations of the safe trait scratchpad::Tracking can cause heap buffer overflows

The get and set methods of the public trait scratchpad::Tracking interact with unsafe code regions in the crate, and they influence the computation of addresses returned as raw pointers. However, the trait itself is not marked as unsafe, meaning users may provide custom implementations under the...