MAL-2025-23645 Malicious code in jasmine-stream-element-ui-config (npm)

The package jasmine-stream-element-ui-config was found to contain malicious code...

MAL-2025-37597 Malicious code in ui-scrollfix (npm)

The package ui-scrollfix was found to contain malicious code...

MAL-2025-16768 Malicious code in chakra-ui-xenos-envconfig-luminescence (npm)

The package chakra-ui-xenos-envconfig-luminescence was found to contain malicious code...

MAL-2025-20019 Malicious code in evs-livepam-ui (npm)

The package evs-livepam-ui was found to contain malicious code...

MAL-2025-32932 Malicious code in semantic-ui-nestjs-ionosphere-terser-webpack-plugin (npm)

The package semantic-ui-nestjs-ionosphere-terser-webpack-plugin was found to contain malicious code...

MAL-2025-15231 Malicious code in aws-ui-runtime (npm)

The package aws-ui-runtime was found to contain malicious code...

MAL-2025-39497 Malicious code in ws-ui-tool (npm)

The package ws-ui-tool was found to contain malicious code...

MAL-2025-34248 Malicious code in sutterhealth-ui-toolkit-widgets (npm)

The package sutterhealth-ui-toolkit-widgets was found to contain malicious code...

MAL-2025-26255 Malicious code in meteor-ursa-element-ui-supercluster (npm)

The package meteor-ursa-element-ui-supercluster was found to contain malicious code...

MAL-2025-29573 Malicious code in ppms-ui-components (npm)

The package ppms-ui-components was found to contain malicious code...

MAL-2025-39405 Malicious code in wolf-thermochronology-europa-chakra-ui (npm)

The package wolf-thermochronology-europa-chakra-ui was found to contain malicious code...

@akitha/new-plugin (0.0.1), @akitha/plugin-chart-hello (>=0.0.1, <=0.0.3) +245 more potentially affected by CVE-2025-55672 via @superset-ui/core (>=0.3.0, <=1.5.0)

@superset-ui/core NPM version =0.3.0, =0.0.1, =0.17.61, =0.0.0, =0.15.2, =0.0.1, =0.15.18, =0.15.18, =0.15.18, =0.15.18, =0.15.18, =0.15.18, =0.15.18, =0.15.18, =0.15.18, =1.0.5 and more Source cves: CVE-2025-55672 Source advisory: SNYK:JS-SUPERSETUICORE-11953561...

Malicious code in signup-ui-lego-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 63d83acde52ca36693d2c4274687d70b0758d12141ee41ae8a97bb6e9267b983 The OpenSSF Package Analysis project identified 'signup-ui-lego-core'...

CVE-2025-8882

Use after free in Aura in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

PT-2025-32770 · Microsoft · Edge For Android

Name of the Vulnerable Software and Affected Versions: Microsoft Edge for Android affected versions not specified Description: A user interface UI misrepresentation of critical information in Microsoft Edge for Android can allow an unauthorized attacker to perform spoofing over a network...

Linux Distros Unpatched Vulnerability : CVE-2020-26954

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp...

Malicious code in zylker-eclassifieds-ui (npm)

The package communicates with a domain associated with malicious activity...

Linux Distros Unpatched Vulnerability : CVE-2021-23976

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp...

MAL-2025-6814 Malicious code in horizon-ui-ng (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 05025cfe461de95f60e8359c367b851181a07564256a7ce672e7c313007d0f87 The OpenSSF Package Analysis project identified 'horizon-ui-ng' @...

Malicious code in horizon-ui-ng (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 05025cfe461de95f60e8359c367b851181a07564256a7ce672e7c313007d0f87 The OpenSSF Package Analysis project identified 'horizon-ui-ng' @...