MAL-2025-48737 Malicious code in local_edwiserform (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f09b291592b83778f66787625c78aa9cf28c760a5b29afd5eb45885b8aef0149 Any computer that has this package installed or running should be considered...

MAL-2025-48752 Malicious code in peloton-creative-assets (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 27599b248968e9e2ea7e7167ee3199163e611123d5a34c382d7041a04ade757e The OpenSSF Package Analysis project identified...

MAL-2025-48528 Malicious code in canary-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74897d1cb26c40f57347ed1208575b63c7c1feb3a92ea2bef8bc84db2700bd8a The OpenSSF Package Analysis project identified 'canary-ng' @ 1337.1.0 npm as malicious. It is considered malicious because: - The package...

PT-2025-42882

Name of the Vulnerable Software and Affected Versions WorkExaminer Professional affected versions not specified Description Communication within WorkExaminer Professional lacks encryption, exposing sensitive data transmitted between monitoring clients, the console, and the server to potential...

Lanscope Endpoint Manager (On-Premises) vulnerable to improper verification of source of a communication channel

Overview Lanscope Endpoint Manager On-Premises provided by MOTEX Inc. contains the following vulnerability. Improper verification of source of a communication channel CWE-940 - CVE-2025-61932 MOTEX Inc. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and...

FreeBSD : Mozilla -- Memory disclosure (f7047dfc-ad02-11f0-b2aa-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f7047dfc-ad02-11f0-b2aa-b42e991fc52e advisory. [email protected] reports: A compromised web process using malicious IPC messages could have caused...

Malicious code in simmons (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-48506 Malicious code in simmons (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-48504 Malicious code in rootsid (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in circleci-docs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d54b71e0248eb8babb0f78827eff5338450108a9cb2814de5573278a5eac86c Any computer that has this package installed or running should be considered...

Malicious code in src_module_index_ts (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bf9366083306734c374979ba195511ae8d793d9e0cb915f2f7374ee7450724c Any computer that has this package installed or running should be considered...

Malicious code in shopifyql-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22c1e659f820da451cb67b3bf646d2511ccc31118a06138dbe97687430e7bbb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in moloch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b1031cde1246782696826dc75e577185deabe22db26d409930d94dc254b2232 The OpenSSF Package Analysis project identified 'moloch' @ 2.0.0 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2025-48459 Malicious code in iwf-ant-design-draggable-modal (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9b3eeea0f26e99c27bbddc1d9e0940e5787aed77004f10d056d9fb1ded4dd8f Any computer that has this package installed or running should be considered...

Malicious code in src_dev-tool_index_ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6c5f130294b305df1adf1e497c66d81ec09ddeffb8bb6d0c486644336706558 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48457 Malicious code in src_dev-tool_index_ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6c5f130294b305df1adf1e497c66d81ec09ddeffb8bb6d0c486644336706558 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48455 Malicious code in src_bootstrap_index_ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb71b0fdc460dc56a61d68833f900a43ed10f7bb2eb8ca4d2065f9a700baa7be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in src_index_ts (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69ae49816d96bbde1aa23dd8285270956273b0026f724d325d2daed22c08b966 Any computer that has this package installed or running should be considered...

Malicious code in src_pages_list_index_tsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 191404621c42806b5e14f38b5dd6674109c26eb03902fa54c23312ee369c6d72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helosifjowe2342 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ff27da2ff03d6b016cef58dfffd401cb2f19e84cf787613903f36a4b834a7c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...