Lucene search
+L

11 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/05 3:07 p.m.•29 views

Malicious code in dolyame-ui-tooltip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fa2102880c7088cf1644fc7731a7fc59b6406477c1939e2dbc0382e8724ad20 The package advertises itself as a tooltip UI component but its main entry index.js unconditionally requires./adapter, which at load time selects a...

6.4AI score
SaveExploits0References1
OSV
OSV
•added 2026/08/05 3:07 p.m.•15 views

MAL-2026-13197 Malicious code in dolyame-ui-tooltip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fa2102880c7088cf1644fc7731a7fc59b6406477c1939e2dbc0382e8724ad20 The package advertises itself as a tooltip UI component but its main entry index.js unconditionally requires./adapter, which at load time selects a...

6.4AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/25 12:16 a.m.•21 views

Malicious code in @oku-ui/tooltip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a877d67aa9ecc5ce75cbb742bfc5ec14376ac9423b13080e69cda80ce1f536e1 The package @oku-ui/tooltip was found to contain malicious code. Source: google-open-source-security...

6.9AI score
SaveExploits0References3
EUVD
EUVD
•added 2025/11/25 12:16 a.m.•13 views

EUVD-2025-199458

Malicious code in @oku-ui/tooltip npm...

6.6AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•9 views

Malicious code in @frozen-ui/tooltip (npm)

The package @frozen-ui/tooltip was found to contain malicious code...

7AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2024/11/14 9:07 a.m.•3 views

Malware in @gthwebdev/ui-tooltip

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/03 7:34 a.m.•10 views

Malicious code in @gthwebdev/ui-tooltip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62aaab200b33789e76005a82f8665eaec345f6c173d63c8fdae72dff0cc2855d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/10/29 1:20 p.m.•8 views

Malicious code in ui-tooltip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4ec8e71cd55c69aa20854cfdc8a408f5591d35551b0d09cfa0bbdd9f148a7401 The OpenSSF Package Analysis project identified 'ui-tooltip' @ 1.1.2 npm as malicious. It is considered malicious because: - The package...

6.9AI score
SaveExploits0
OSV
OSV
•added 2024/10/29 1:20 p.m.•10 views

MAL-2024-10282 Malicious code in ui-tooltip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4ec8e71cd55c69aa20854cfdc8a408f5591d35551b0d09cfa0bbdd9f148a7401 The OpenSSF Package Analysis project identified 'ui-tooltip' @ 1.1.2 npm as malicious. It is considered malicious because: - The package...

7.1AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2015/07/21 10:14 a.m.•15 views

jquery-ui: XSS vulnerability in default content in Tooltip widget

Cross-site scripting XSS vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo...

4.3CVSS5.9AI score0.07475EPSS
SaveExploits0References4
OSV
OSV
•added 2014/11/24 4:59 p.m.•17 views

DEBIAN-CVE-2012-6662

Cross-site scripting XSS vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo...

4.3CVSS5.9AI score0.07475EPSS
SaveExploits0References1
Rows per page
Query Builder