Malicious Package

Overview rtk-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Tigo Energy Cloud Connect Advanced security vulnerabilities

Tigo Energy Cloud Connect Advanced is a compact data logger from Tigo Energy USA. A security vulnerability exists in Tigo Energy Cloud Connect Advanced that stems from insecure session ID generation that could lead to unauthorized access...

Malicious code in cookie-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c94db01436156d78a21b41d74cf372b4e12f89a2480b8986397309b1c4165b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview cookie-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malware in cookie-logger

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-6359 Malicious code in cookie-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c94db01436156d78a21b41d74cf372b4e12f89a2480b8986397309b1c4165b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @company-internal/logger

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview @company-internal/logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2025-6339 Malicious code in query-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed848ba7a41198ae72f2a0c36d31e627fe5ca7503bae293fe204e3a3dff65620 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview query-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in query-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed848ba7a41198ae72f2a0c36d31e627fe5ca7503bae293fe204e3a3dff65620 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in query-logger

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in trigger-dev-logger (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6773 Malicious code in trigger-dev-logger (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in internal-logger-embaby (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6729 Malicious code in internal-logger-embaby (npm)

The package communicates with a domain associated with malicious activity...

Security Bulletin: IBM Cognos Analytics is affected by a security vulnerability in Python JSON Logger (CVE-2025-27607)

Summary There is a vulnerability in Python JSON Logger used by IBM Cognos Analytics CVE-2025-27607. This Security Bulletin relates only to the direct usage of third-party components by IBM Cognos Analytics, and not any nested dependencies within the product. Vulnerability Details...

Malicious code in @teamstelemetry/shared-logger (npm)

The package communicates with a domain associated with malicious activity...

Malware in @0xzyo111/frontend-logger

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-6216 Malicious code in bingo-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f96e6e47500342e1cad70444862565ee48be2e2fc9f3d0e7dd92d8e8c662a231 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...