CVE-2025-44017

"Gunosy" App contains a vulnerability where sensitive information may be included in the application's outbound communication. If a user accesses a crafted URL, an attacker may obtain the JWT JSON Web Token...

CVE-2025-44017

CVE-2025-44017 concerns the"Gunosy" App and involves insertion of sensitive information into sent data (CWE-201). The exposed data could include a JWT if a user visits a crafted URL, enabling token leakage via outbound communication. Concrete details from connected sources show affected platforms...

MAL-2025-44548 Malicious code in hb-otc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b382c578afb33978acde21c28497857451795f4dea0da2d567e5df9a437e646e Any computer that has this package installed or running should be considered...

MAL-2025-44029 Malicious code in document-metadata (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 310a04e0fbc7e2ba328f1b392655733ca387093a2e627dfdcc6beec46521cd3a Any computer that has this package installed or running should be considered...

Malicious code in react-native-wm-barcode (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d41cd8af4fc659204e641358eda189dac7d136a2918f8cec5c945431ced9a512 Any computer that has this package installed or running should be considered...

Malicious code in internal-helper-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

CVE-2025-7731

Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to obtain credential information by intercepting SLMP communication messages, and read or write the device values of the product...

Malicious code in berachain-metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44aebab0bbbd5111085070765f75cb2a7863bb8c97a276b96596f69a2062d10d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-53418

Delta Electronics COMMGR has Stack-based Buffer Overflow vulnerability...

Malicious code in test343tttt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 14a83c7be6d241a79ccd6f23880afa83b749ac59232786eaab03a62b2512c9b7 The OpenSSF Package Analysis project identified 'test343tttt' @ 99.9.1 npm as malicious. It is considered malicious because: - The package...

Linux Distros Unpatched Vulnerability : CVE-2017-1000121

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate message size metadata, allowing a compromised secondary process t...

Malicious code in accumulateinfo (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @callcenter-frontend/ui-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f7f41480a8be02c290f1d1b9915b4a57528a979a2736206adf8e3c701b44f846 The OpenSSF Package Analysis project identified...

MAL-2025-41828 Malicious code in @callcenter-frontend/shared-types (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9f78119137abb744cf51b995b836463c88b03fb249997685f0e4a2feb7ef621e The OpenSSF Package Analysis project identified...

Malicious code in @callcenter-frontend/ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f4016a8ba643f5006745e20e9ffdf0834e7866393f01cb525cd3bfafc8131218 The OpenSSF Package Analysis project identified...

Malicious code in pwn4arn (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in testingfor123 (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in tested123 (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-42098 Malicious code in tested123 (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in contentprocessor_web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b5e5b8bd7f3d15416cf2fc63a4f56e47a746fc01ebf6844fd883d58cd55055dc The OpenSSF Package Analysis project identified 'contentprocessorweb' @ 10.0.1 npm as malicious. It is considered malicious because: - The packa...