Lucene search
+L
SnykMost viewed

42504 matches found

Snyk
Snyk
•added 2026/08/12 3:31 p.m.•17 views

Malicious Package

Overview @assetshop/verify-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/08/12 3:31 p.m.•17 views

Malicious Package

Overview @years19/n8n-nodes-utils-helper-i is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/08/11 9:31 p.m.•17 views

Malicious Package

Overview internallibv164 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.4AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/08/10 4:41 p.m.•17 views

Malicious Package

Overview godot-kit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.4AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/08/10 4:41 p.m.•17 views

Malicious Package

Overview @sqlite-table/schema-generator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...

9.8CVSS5.4AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/08/05 3:57 p.m.•17 views

Improper Neutralization of Null Byte or NUL Character

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Improper Neutralization of Null Byte or NUL Character via the shell.openPath function. An attacker can bypass file path...

6CVSS5.4AI score0.001EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 9:00 p.m.•17 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 9:00 p.m.•17 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 9:00 p.m.•17 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 9:00 p.m.•17 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 9:00 p.m.•17 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 9:00 p.m.•17 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 9:00 p.m.•17 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 9:00 p.m.•17 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 9:00 p.m.•17 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 9:00 p.m.•17 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 9:00 p.m.•17 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 9:00 p.m.•17 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 9:00 p.m.•17 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 9:00 p.m.•17 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 9:00 p.m.•17 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/08/03 9:00 p.m.•17 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/08/01 3:43 a.m.•17 views

Malicious Package

Overview test-dev-sync is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/30 10:49 p.m.•17 views

Malicious Package

Overview express-sequelize-wrapper is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/30 10:35 p.m.•17 views

Malicious Package

Overview ecto-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/30 10:04 p.m.•17 views

Malicious Package

Overview react.jd is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/30 5:51 p.m.•17 views

Regular Expression Denial of Service (ReDoS)

Overview apache-superset is a modern, enterprise-ready business intelligence web application. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS in the sqlparse.py component, specifically within the SQLREGEX used for parsing SQL statements. An attacker...

6.5CVSS5.8AI score0.00413EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/28 9:00 p.m.•17 views

Malicious Package

Overview @joyfill/layouts is a malicious package. This package contains a supply chain compromise that executes a malicious payload immediately upon import of the vulnerable versions. When loaded, the package uses decentralized blockchain resolvers Tron, Aptos, BNB Smart Chain to fetch and execut...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•17 views

Malicious Package

Overview typography-stylecss is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•17 views

Malicious Package

Overview @pelmnaads/naads-common-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•17 views

Malicious Package

Overview vue-template-compiler-plugin is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•17 views

Malicious Package

Overview figma-d2c-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•17 views

Malicious Package

Overview chai-plugin-helper is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•17 views

Malicious Package

Overview proto-bin is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•17 views

Malicious Package

Overview binproto is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•17 views

Malicious Package

Overview metavu is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•17 views

Malicious Package

Overview computerrock-babel-preset-react-app is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization an...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•17 views

Malicious Package

Overview @civitatis/bot-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•17 views

Malicious Package

Overview request-tracking-sqlite is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•17 views

Malicious Package

Overview chai-as-operated is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•17 views

Malicious Package

Overview sysau is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•17 views

Malicious Package

Overview simple-node-calc-b is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•17 views

Malicious Package

Overview backpack-ios is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•17 views

Malicious Package

Overview afterpay-sdk-example-server is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•17 views

Malicious Package

Overview abu-common-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•17 views

Malicious Package

Overview agentsync-tool is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/27 10:59 p.m.•17 views

Malicious Package

Overview node-procmetrics is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/27 4:15 p.m.•17 views

Malicious Package

Overview identityauthorizationserv is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/27 3:55 p.m.•17 views

Arbitrary File Write via Archive Extraction (Zip Slip)

Overview unzipper is a library for the Uzip cross-platform streaming AP.I Affected versions of this package are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip in the extraction path validation in lib/extract.js and lib/Open/directory.js, which check only that the resolved path...

5.5CVSS7AI score0.11917EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/07/27 11:05 a.m.•17 views

Improper Handling of Highly Compressed Data (Data Amplification)

Overview thrift is a Ruby bindings package for Apache Thrift. Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification through the ZLIB transform in lib/rb/lib/thrift/transport/headertransport.rb. An attacker can trigger memory and CPU...

8.7CVSS5.5AI score0.00645EPSS
SaveExploits0References2
Total number of security vulnerabilities5000