MAL-2025-48097 Malicious code in @testcarrot/supply2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c6b1ac7e0d732e96fb12ebfc09964c4e8a5a58fb8b0a2dc11dab3fad6c78359 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48095 Malicious code in @testcarrot/supply1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 517d985985f415a1c4c91f10bdfc1757c72f7331c1f00d61ef96d902603783e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

py-social-auth-app-django -- Unsafe account association

Michal Čihař reports: Upon authentication, the user could be associated by e-mail even if the associatebyemail pipeline was not included. This could lead to account compromise when a third-party authentication service does not validate provided e-mail addresses or doesn't require unique e-mail...

PT-2025-41402

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 21.4R3 Juniper Networks Junos OS versions 22.2 before 22.2R3-S3 Description An Origin Validation Error exists in a file within Juniper Networks Junos OS on EX4600 Series and QFX5000 Series. An...

PT-2025-41492

Name of the Vulnerable Software and Affected Versions Python Social Auth versions prior to 5.6.0 Description Python Social Auth is a social authentication/registration mechanism. In versions prior to 5.6.0, a user could be associated by email during authentication even if the associate by email...

Ubuntu: Security Advisory (USN-7795-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-20202 Web Developer for Chrome v0.4.9 Malicious Backdoor Supply Chain Compromise

Web Developer for Chrome v0.4.9 contained malicious code that generated a domain via a DGA and fetched a remote script. The fetched script conditionally loaded follow-on modules that performed extensive ad substitution and malvertising, displayed fake “repair” alerts that redirected users to...

Vulnerability fixed in Oracle E-Business Suite

Oracle has fixed a vulnerability in Oracle E-Business Suite Specifically for the Concurrent Processing component in versions 12.2.3 to 12.2.14. The vulnerability is located in the Concurrent Processing component of the Oracle E-Business Suite. Unauthenticated attackers can exploit this...

Malicious code in redirect-g7gn31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41449301c25a672dfe856f930f2db780d4971f16a0b88378cb93d78369a20e73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-qrah57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db917c85b5931f7072dbd29e85df939cac604bc86e6fa7800a29defb2b716c00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-ci4ynt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6192340fc5c992962663104944e345473999ca164f0e87b9edbc7ec0a6898e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-nuyvwk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35133a0ea653785ed6a6339636f560ca0db12d687272233f4a250d7931cc1f29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-l0m7on (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5f0c29bd299b19cfd665b1cc3de528b54629cf325cb6bf340e928a922f62f0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-l6qi9e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea7c9759afb33de9be7fc7e051d5e7c5b3f74868b9887fec3b2e4d7b892d3fa2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48054 Malicious code in redirect-f1wut9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40b8c43103721f09fbd0c6ae769a14dac343523d48beb1494a934cafca750a99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48052 Malicious code in redirect-dravb9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ada24832ca1483913a8a5287458635e479ea1d11ba7809f73dd45d30dc08ed14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48064 Malicious code in redirect-l6qi9e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea7c9759afb33de9be7fc7e051d5e7c5b3f74868b9887fec3b2e4d7b892d3fa2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48050 Malicious code in redirect-aw9itj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63aaf18f4006c8f27a7b0418692132ad2c600f3562eb6105c133cc52f91c0d40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48055 Malicious code in redirect-fhelhf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 368f02b6ee060f7f28ab2779a2c2e2116d3da5c243b5c870030c2c63103d4fff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-v74zee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00eb82dc8fa348e42a4e1260cd210adb1e29238ba2b0d7035b5e9257cb2038b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...