129 matches found
Malicious code in tw-chat-search (npm)
The package tw-chat-search was found to contain malicious code...
Malicious code in sj-tw-sec (npm)
The package sj-tw-sec was found to contain malicious code...
MAL-2025-33340 Malicious code in sj-tw-abc (npm)
The package sj-tw-abc was found to contain malicious code...
Malicious code in sj-tw-test-security (npm)
The package sj-tw-test-security was found to contain malicious code...
Malicious code in sj-tw-abc (npm)
The package sj-tw-abc was found to contain malicious code...
Malicious code in @zalastax/nolb-react-tw (npm)
The package @zalastax/nolb-react-tw was found to contain malicious code...
MAL-2025-33341 Malicious code in sj-tw-sec (npm)
The package sj-tw-sec was found to contain malicious code...
MAL-2025-33342 Malicious code in sj-tw-test-security (npm)
The package sj-tw-test-security was found to contain malicious code...
MAL-2025-13818 Malicious code in @zalastax/nolb-react-tw (npm)
The package @zalastax/nolb-react-tw was found to contain malicious code...
MAL-2025-37349 Malicious code in tw-chat-search (npm)
The package tw-chat-search was found to contain malicious code...
CVE-2025-53945 vulnerabilities
Vulnerabilities for packages: tw...
GHSA-X6PH-R535-3VJW vulnerabilities
Vulnerabilities for packages: tw...
CVE-2025-53945 vulnerabilities
Vulnerabilities for packages: cg, chainctl, tw...
GHSA-X6PH-R535-3VJW vulnerabilities
Vulnerabilities for packages: cg, chainctl, tw...
Malicious code in tw-core-ui (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware effb17ff1202bd8522ed8a37591dc22da8c39ed2554771c3566b2ac7d4e356f2 Any computer that has this package installed or running should be considered...
MAL-2025-5836 Malicious code in tw-core-ui (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware effb17ff1202bd8522ed8a37591dc22da8c39ed2554771c3566b2ac7d4e356f2 Any computer that has this package installed or running should be considered...
scuba-tw.com Cross Site Scripting vulnerability OBB-4043327
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation
A flaw was found in PostgreSQL. Due to improper neutralization of quoting syntax, affected versions potentially allow a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the affected function's result to constru...
postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation
A flaw was found in PostgreSQL. Due to improper neutralization of quoting syntax, affected versions potentially allow a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the affected function's result to constru...
postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation
A flaw was found in PostgreSQL. Due to improper neutralization of quoting syntax, affected versions potentially allow a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the affected function's result to constru...