Malicious code in defectdojo (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5291 Malicious code in defectdojosw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93d614c0d808786b112774fdec4eb2b8afecef6ec8de82e4945bdc644e5023c4 The OpenSSF Package Analysis project identified 'defectdojosw' @ 10.1.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-5279 Malicious code in phantom-labs-sandbox (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fd1e98be0b346737740a6114c37dc7dd21cd328f21d026e07d9eb0348e43464 Any computer that has this package installed or running should be considered...

CVE-2025-5087

Kaleris NAVIS N4 ULC Ultra Light Client communicates insecurely using zlib-compressed data over HTTP. An attacker capable of observing network traffic between Ultra Light Clients and N4 servers can extract sensitive information, including plaintext credentials...

MAL-2025-5309 Malicious code in meli-ai-chat-library (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fe9cef75ee52e8b6473470f69a31b8e7057f0fb632c88b89af63c14484d1c13 Any computer that has this package installed or running should be considered...

MAL-2025-5368 Malicious code in blade_background (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8e0ab7bc65f47415c49500ce45a5167fd26a9eb02322a1b7d4d7d61c632c960 Any computer that has this package installed or running should be considered...

CVE-2025-48463

Successful exploitation of the vulnerability could allow an attacker to intercept data and conduct session hijacking on the exposed data as the vulnerable product uses unencrypted HTTP communication, potentially leading to unauthorised access or data tampering...

Malicious code in myuscis-material (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cba011b86ceb83ee613aceb9c55a91e8aabbb2df8d473962bff0b0c55879ce49 The OpenSSF Package Analysis project identified 'myuscis-material' @...

Malicious code in ce24 (npm)

The package communicates with a domain associated with malicious activity...

How to Quantify Risk and Communicate Effectively: Step 4 to TruRisk™

“The art of communication is the language of leadership.” — James Humes, former Presidential speechwriter and author. Cybersecurity teams face adversaries who thrive in chaos. Attackers move fast, automate, and strike where defenses are weakest. In a borderless digital world, disruption is...

MAL-2025-5466 Malicious code in ted-ui (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in pnp-resume (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in irradiance (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e26991c136a318903b5628c9d72dc626e92359c6e2e22efbd6c656c400974f9d Any computer that has this package installed or running should be considered...

MAL-2025-5428 Malicious code in kwp-a-b-testing (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5249 Malicious code in nstmrt-stf-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0da052c315a64ad23ddcebd853a91fc2f81597d0cd587326b5f7554911cc9d73 The OpenSSF Package Analysis project identified 'nstmrt-stf-api' @ 1.0.10 npm as malicious. It is considered malicious because: - The package...

Communication-Efficient Publication of Sparse Vectors under Differential Privacy

Whitepaper called Communication-Efficient Publication Of Sparse Vectors Under Differential Privacy...

MAL-2025-5242 Malicious code in braintree-dropin (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 975d9545344189dda20be0c6790c2deebbd8fbf1d3b992641dea6f1044521436 Any computer that has this package installed or running should be considered...

CVE-2025-5087

Kaleris NAVIS N4 ULC Ultra Light Client communicates insecurely using zlib-compressed data over HTTP. An attacker capable of observing network traffic between Ultra Light Clients and N4 servers can extract sensitive information, including plaintext credentials...

CVE-2025-5087

CVE-2025-5087 affects Kaleris NAVIS N4 ULC (Ultra Light Client). The connected documents describe an unsafe Java deserialization vulnerability and insecure transmission of zlib-compressed data over HTTP, enabling an attacker who can observe traffic between Ultra Light Clients and N4 servers to ex...

MAL-2025-5356 Malicious code in agoda.cronos.activities.client-side (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0928f5727876dc4dcdb9f1869badd5793565d97277f96836f85b5413f44bcaf9 Any computer that has this package installed or running should be considered...