MAL-2025-47403 Malicious code in kreme-circuits (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 115a80b8aadb1029e4fdf7ec27a30991a73af718770b70a89211f740bbad9c40 Any computer that has this package installed or running should be considered...

MAL-2025-47412 Malicious code in suchinind (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a328ee17c3878f22beddf954e26fea98cfcedc0377a9aae3f9382b01cb55acf Any computer that has this package installed or running should be considered...

Malicious code in suchinind (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a328ee17c3878f22beddf954e26fea98cfcedc0377a9aae3f9382b01cb55acf Any computer that has this package installed or running should be considered...

MAL-2025-47393 Malicious code in bsd-form-ui-kit (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-47401 Malicious code in igame (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92630c29a80ab3e4195e1528efb3bd2de3c21723225eeec79687f40648f15b42 Any computer that has this package installed or running should be considered...

MAL-2025-47409 Malicious code in sbrugna (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b3eb6e4038d15cc9e9407d28d2c69d0217e22a392a0fe3305ee324be95d9f75 Any computer that has this package installed or running should be considered...

Malicious code in top-crawl-agents (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9696763f6821540dd1025eb17efe91e97175725aa5add6b347bfc09db48e33cc Any computer that has this package installed or running should be considered...

Malicious code in @gc-crm/gc-crm-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf39ace819686baffe9455922e74af791567817ba9cce482693ba58166e35ed8 Any computer that has this package installed or running should be considered...

Malicious code in simplemoduleonetestone (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-47410 Malicious code in simplemoduleonetestone (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in updox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6dd4f7a8300a1eb6ed1be834e8cbec76f95c8eb7325192124ad7379896c9a0b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-45091

Seafile versions 11.0.18-Pro, 12.0.10, and 12.0.10-Pro are vulnerable to a stored Cross-Site Scripting XSS attack. An authenticated attacker can exploit this vulnerability by modifying their username to include a malicious XSS payload in notification and activities...

Attackers Actively Exploiting Critical Vulnerability in Case Theme User Plugin

📢 Calling all Vulnerability Researchers and Bug Bounty Hunters!📢 🚀 Operation: Maximum Impact Challenge ! Now through November 10, 2025, earn 2X bounty rewards forall in-scope submissions in software with at least 5,000 active installs and fewer than 5 million active installs. Bounties up to $31,2...

MAL-2025-47094 Malicious code in eth-exec-txs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 288cdf368821283de11f98ec0f9c5d0daf500ed6be174fd0c3c7811d4346cf1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

security-analytics

This repository is a community-driven set of security analytics for auditing cloud usage and detecting threats to data & workloads in Google Cloud. It provides a list of sample security analytics for auditing cloud usage and detecting threats, which may assist detection engineers, threat hunters,...

MAL-2025-47114 Malicious code in actor-storage (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in simplemoduleonetest (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-47126 Malicious code in simplemoduleonetest (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

[SECURITY] Fedora 41 Update: bustle-0.12.0-3.fc41

Bustle draws sequence diagrams of D-Bus activity, showing signal emissions, method calls and their corresponding returns, with timestamps for each individual event and the duration of each method call. This can help you check for unwanted D-Bus traffic, and pinpoint why your D-Bus-based applicati...

[SECURITY] Fedora 42 Update: bustle-0.12.0-3.fc42

Bustle draws sequence diagrams of D-Bus activity, showing signal emissions, method calls and their corresponding returns, with timestamps for each individual event and the duration of each method call. This can help you check for unwanted D-Bus traffic, and pinpoint why your D-Bus-based applicati...