Malicious code in cx-hub-interaction-ui-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a9bc1addddaee6ed4aa8352a5162c828bddcc53ddee490fb211f76247c23cd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48277 Malicious code in dt-frontend-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d84c9e90fa62a28e4b2b22f78ffa732463fd6351f426e71f105661f00179e4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48271 Malicious code in advertising-charts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e0d648b7b4026cddfac170e95dee7ace2e607be7c21ce885f7ac237135e3478 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48270 Malicious code in nodelogex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54f45e13513bdb340726cc75dc48eff1e5840e2d95ef3ce626397fff25e6a46c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodelogex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54f45e13513bdb340726cc75dc48eff1e5840e2d95ef3ce626397fff25e6a46c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-41567

Name of the Vulnerable Software and Affected Versions RISE Ultimate Project Manager & CRM affected versions not specified Description An issue exists in RISE Ultimate Project Manager & CRM that allows authenticated users to inject arbitrary HTML into invoices and messages. This injected content...

EUVD-2025-33722

Stored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HTML into invoices and messages. Injected content renders in emails, PDFs, and messaging/chat modules sent to clients or team members, enabling phishing, credential theft, and business emai...

PT-2025-41541

Name of the Vulnerable Software and Affected Versions Kiwire Captive Portal affected versions not specified Description The software contains a blind SQL injection in the nas-id parameter. This allows for the execution of SQL commands and potential compromise of the database. Recommendations At t...

CVE-2025-61319

CVE-2025-61319 affects ReNgine up to version 2.2.0. Affected component: Vulnerabilities module; root cause is unsanitized XSS payloads rendered in the web UI during scans, enabling arbitrary JavaScript execution in a victim’s browser. Impact can include session cookie theft, unauthorized actions,...

CVE-2025-60378

Stored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HTML into invoices and messages. Injected content renders in emails, PDFs, and messaging/chat modules sent to clients or team members, enabling phishing, credential theft, and business emai...

MAL-2025-48266 Malicious code in react-copack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57401915f2c34bc9f6acd6172ce514016093a6857148c0d46ef0bad52792c357 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-copack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57401915f2c34bc9f6acd6172ce514016093a6857148c0d46ef0bad52792c357 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-next-loggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 349c5908fb3c2430a77d9a6c96edebbbbda04c5d50a0826b4c0f7e8d002ba345 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48268 Malicious code in vite-configs-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb19ecaeacbca9e361ca15d50c99cbfa3ad023b63d06465ae2ad9d9988ab5a63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kpi-media-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b3bb2b9c205d4f8a38e5c5272fb0c10f8d0d0f12809f2e0a7b3d95f1ed5a17d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48255 Malicious code in mad-2.4.0.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df1e3a4bb9401d121fd56de5fe7d0eafe40f656c5d8c4f61598a11a9e95b24f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-1.4.2.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d0a5225829fc638c078c685eb6af4bed3caed292f068beb8b26ce84158e7cbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-2.4.0.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df1e3a4bb9401d121fd56de5fe7d0eafe40f656c5d8c4f61598a11a9e95b24f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48256 Malicious code in mad-2.4.1.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56c6fc06b90e0e637cc8ef419f8a5844e909deaf9cc68f1c73e231757e6f214a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-1.2.9.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9ee7df3c05d745488aab56d8e7e24dcc135b735d5f8b1f7a620b635e2d1514e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...