Skip to content
OpenAdvisories

Weakness (CWE)

CWE-506: Embedded Malicious Code

Class Incomplete

The product contains code that appears to be malicious in nature.

How to prevent it (1 mitigation)

  1. Implementation, Operation

    Remove the malicious code and start an effort to ensure that no more malicious code exists. This may require a detailed review of all code, as it is possible to hide a serious attack in only one or two lines of code. These lines may be located almost anywhere in an application and may have been intentionally obfuscated by the attacker.

Source: MITRE CWE-506

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.5
    CVE-2025-54313 Exploited Public exploit

    eslint-config-prettier, eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall have embedded malicious code

    eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows.

    prettier eslint-config-prettier napi-postinstall eslint-plugin-prettier npm
    KEV Jan 22, 2026
  • High 8.6
    CVE-2025-30154 Exploited

    Multiple Reviewdog actions were compromised during a specific time period

    reviewdog/action-setup is a GitHub action that installs reviewdog. reviewdog/action-setup@v1 was compromised March 11, 2025, between 18:42 and 20:31 UTC, with malicious code added that dumps exposed secrets to Github Actions Workflow Logs. Other reviewdog act…

    reviewdog reviewdog reviewdog/action-setup GitHub Actions
    KEV Mar 24, 2025
  • High 8.6
    CVE-2025-30066 Exploited Public exploit EPSS 72%

    tj-actions changed-files through 45.0.7 allows remote attackers to discover secrets by reading actions logs.

    tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs. (The tags v1 through v45.0.7 were affected on 2025-03-14 and 2025-03-15 because they were modified by a threat actor to point at commit 0e58ed8, which cont…

    tj-actions changed-files tj-actions/changed-files GitHub Actions
    KEV Mar 18, 2025
  • High 8.4
    CVE-2024-4978 Exploited EPSS 27%

    Malicious Code in Justice AV Solutions (JAVS) Viewer

    Justice AV Solutions Viewer Setup 8.3.7.250-1 contains a malicious binary when executed and is signed with an unexpected authenticode signature. A remote, privileged threat actor may exploit this vulnerability to execute of unauthorized PowerShell commands.

    Justice AV Solutions Viewer
    KEV May 29, 2024