Skip to content
OpenAdvisories

Weakness (CWE)

CWE-508: Non-Replicating Malicious Code

Base Incomplete

Non-replicating malicious code only resides on the target system or product that is attacked; it does not attempt to spread to other systems.

How to prevent it (2 mitigations)

  1. Operation

    Antivirus software can help mitigate known malicious code.

  2. Installation

    Verify the integrity of the software that is being installed.

Source: MITRE CWE-508

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.6
    GHSA-3hfp-gqgh-xc5g

    Axios supply chain attack - dependency in @lightdash/cli may resolve to compromised axios versions

    ### Impact A supply chain attack on the `axios` npm package (versions 1.14.1 and 0.30.4) introduced a malicious transitive dependency (`plain-crypto-js@4.2.1`) that deploys a cross-platform remote access trojan (RAT) on macOS, Windows, and Linux. The attacker…

    @lightdash/cli npm
  • Medium 4.3
    CVE-2025-24216

    The issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iP…

    Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu