Malicious code in eslint-plugin-react-hooks-published (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647dedd2c8ea8a9cef54b85666b74459095d17369da310d54a0c1960f87dafe6 The package eslint-plugin-react-hooks-published was found to contain malicious code. Source: ghsa-malware...

Malicious code in browser-client-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9ad0cf7ca8faf91e654dc6ceb89ca235f191edc099334e5d8cf1a070bfb128a The package browser-client-neptune was found to contain malicious code. Source: ghsa-malware...

CVE-2022-37055

creationtimestamp| type| source ---|---|--- 2025-11-27 11:52:43+00:00| seen| https://threatintel.cc/2025/11/27/botnet-takes-advantage-of-aws.html 2025-11-27 12:52:30+00:00| seen| https://infosec.exchange/users/edwardk/statuses/115621753678740046 2025-11-27 15:20:22+00:00| seen|...

CVE-2025-33203

creationtimestamp| type| source ---|---|--- 2025-11-26 16:25:11+00:00| seen| https://infosec.exchange/users/AAKL/statuses/115616927159484156 2025-11-26 17:31:15+00:00| seen| https://mastodon.social/ap/users/115426718704364579/statuses/115617187434161563 2025-11-26 17:31:31+00:00| seen|...

Malicious code in signup-failover (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 312b617198eea306feca99cf5c14a0edb7668482ca605c8e74c2d20f71eddd19 The package signup-failover was found to contain malicious code. Source: ghsa-malware 930d3ccde5bf7b3147cb807fddbc366f04c3185a70a8ff885f106503b657300...

Malicious code in vue3-transpiler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61eaca42a219c9b161768c7938d34f6bc4d6e169c5ae43e88acf7a8a70be537b The package vue3-transpiler was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in lyft-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70fc3f07a26106b927cf0e4fc2f5f7692c8392b48700359bccb2618bc1ac1565 The package lyft-ui was found to contain malicious code. Source: ossf-package-analysis 1eca95468591ff582df3fadd1de8f6ffef5eb00720afbd1a511b5ea75ab556...

Malicious code in doordash-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2c2fc3e4bccd347a784ca9271e03d26dcc7e89c2e697f9e04b2e1e26cfc80d The package doordash-ui was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in snapchat-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80100098d97efb3e0e143ef48523c4bf1724d39fe46eec08532a084d22ef911d The package snapchat-ui was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in hilton-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f865ea8e9dc8af2f134e9b7fc318eceef8ff54af8fc491d1feb2d2c5788441f4 The package hilton-ui was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190616 Malicious code in uber-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb767de450fdafc6d2aa88f77a1f0a95188ddb866565c91258711f3434ce561e The package uber-ui was found to contain malicious code. Source: ossf-package-analysis 9706819391825d94f76cf6530978ae5e88f3a58ccc386090ef6523825393fb...

MAL-2025-190612 Malicious code in instacart-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e2fadf49fd1948b4d1d7049083d559cfdaec04a7247f1355729b1278b9bd3e2 The package instacart-ui was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in o2-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12445272ee24c376909e302bc2f4fe2c23af7aae5479ca74493a57adcdd4f028 The package o2-modal was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190604 Malicious code in airbnb-react-router-legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbad26f42924fe90947efc559b87354b3cc495e2aad542844029ebfe7d0ec3d9 The package airbnb-react-router-legacy was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in wishlist_dropdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96af5d4cffbd1a2bb13ecd403b9acf5e0fe62f6df151c6b511f556c9c0a11c31 The package wishlistdropdown was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in airbnb-blueimp-file-upload (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e31d7485138d523c3fc40982b857b4c758f73f46c1bd66952aa2f877625b480 The package airbnb-blueimp-file-upload was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in airbnb-luxury-messaging (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3721ccc0b94a8795edd99efa6ea640102c705346c6270a7ac203911797eaa7e The package airbnb-luxury-messaging was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in airbnb-story-constants (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ee587585b5d6ce7a559b01b7ca42796dcd026647cce38e2056a0893bd4c7429 The package airbnb-story-constants was found to contain malicious code. Source: ossf-package-analysis...

Salesforce Flags Unauthorized Data Access via Gainsight-Linked OAuth Activity

Salesforce has warned of detected "unusual activity" related to Gainsight-published applications connected to the platform. "Our investigation indicates this activity may have enabled unauthorized access to certain customers' Salesforce data through the app's connection," the company said in an...

CVE-2025-62459

creationtimestamp| type| source ---|---|--- 2025-11-20 22:44:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115584444564008370 2025-11-20 23:35:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m63wmsxop72x 2025-11-20 23:55:08+00:00| seen|...