12902 matches found
MAL-2025-47864 Malicious code in v-pure-tooltip (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11bde7847b3225c4c27a2008a9044848c459c69ebe532cf7fd4d0939d4f91f86 Any computer that has this package installed or running should be considered...
MAL-2025-47862 Malicious code in stylelint-config-twbs-applestrap (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c4321ac47009a37e5956e0e2eeb2b098a8c56df9d9e9ed0b71c26f78ecff884 Any computer that has this package installed or running should be considered...
Abusing Notion’s AI Agent for Data Theft
Notion just released version 3.0, complete with AI agents. Because the system contains Simon Willson's lethal trifecta, it's vulnerable to data theft though prompt injection. First, the trifecta: The lethal trifecta of capabilities is: Access to your private data --one of the most common purposes...
Malicious code in phoenix-platform (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69b500d89836dd1a319cc80d28b1c005dc428afe1520fea95cd3f82b8109bc87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
On the Limitations of Pseudorandom Unitaries
Pseudorandom unitaries PRUs, one of the key quantum pseudorandom notions, are efficiently computable unitaries that are computationally indistinguishable from Haar random unitaries. While there is evidence to believe that PRUs are weaker than one-way functions, so far its relationship with other...
MAL-2025-47819 Malicious code in mahmoudtest (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72d145d1c87ce8ee88e57350f32db7041f4a990fa68d1cba09cf285ef03959a8 Any computer that has this package installed or running should be considered...
Malicious code in rsi-configuration-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9a9a3e53f5018108f5ce8abbccd7313ccac30e61c7985e5d7d90291c30299957 The OpenSSF Package Analysis project identified 'rsi-configuration-module' @ 1.1.2 npm as malicious. It is considered malicious because: - The...
MAL-2025-47839 Malicious code in @my-pvz/ui-kit (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cdc756704726b9cfb66ba52746b5d42a7b6f8742370a8bf409a664879607281 Any computer that has this package installed or running should be considered...
MAL-2025-47610 Malicious code in ai-communication-app (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ai-communication-app (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in kite-public (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-47854 Malicious code in node-melitk-config (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88dc6316252ef33fdae8980d00eb9ac549ca8913087ed5ca7bf8eb8fac6e5f34 Any computer that has this package installed or running should be considered...
MAL-2025-47603 Malicious code in filecoin-checker-shared (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6196805b97dfa338fede5b1f871b87e26bfe4909ed5ac6a26c580e29f40cd85d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Bridging Technical Capability and User Accessibility: Off-Grid Civilian Emergency Communication
During large-scale crises disrupting cellular and Internet infrastructure, civilians lack reliable methods for communication, aid coordination, and access to trustworthy information. This paper presents a unified emergency communication system integrating a low-power, long-range network with a...
CVE-2025-10540 Unencrypted and Unauthenticated Communication Allows Data Exposure and Manipulation in iMonitor EAM
iMonitor EAM 9.6394 transmits communication between the EAM client agent and the EAM server, as well as between the EAM monitor management software and the server, in plaintext without authentication or encryption. An attacker with network access can intercept sensitive information such as...
CVE-2025-10540 Unencrypted and Unauthenticated Communication Allows Data Exposure and Manipulation in iMonitor EAM
iMonitor EAM 9.6394 transmits communication between the EAM client agent and the EAM server, as well as between the EAM monitor management software and the server, in plaintext without authentication or encryption. An attacker with network access can intercept sensitive information such as...
PT-2025-44111
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to insufficient input validation in the NFC Near Field Communication subsystem. Specifically, the nci init req function had limited validation,...
MAL-2025-47515 Malicious code in vault-api-redux-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 15cac4b456079ac507ddcba10b8fb9b258c916f8fcc7d22565567810a43d6a63 The OpenSSF Package Analysis project identified 'vault-api-redux-client' @ 9000.0.0 npm as malicious. It is considered malicious because: - The...
