51290 matches found
MAL-2025-48038 Malicious code in qr-code-demo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6749d8eadfe0585d427c6322c10d15c81e3e58171b08a31de2a4abbaddfb9264 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in swiftiegpt (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18847d1a8872346fbceb2ef41566692d5a48061194a4dc47c48baca4f1bfb94d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in qr-code-demo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6749d8eadfe0585d427c6322c10d15c81e3e58171b08a31de2a4abbaddfb9264 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in rails-dom-testing (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c71a0792e9dc0f14b43ce18d9e3c77d91946237916717b87a53222fb8fec287a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48039 Malicious code in rails-dom-testing (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c71a0792e9dc0f14b43ce18d9e3c77d91946237916717b87a53222fb8fec287a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in storefront-search-as-you-type (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0e0258430f6ebc7401b9e28828d8433806e188a230f2a687fa206651d72978c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48027 Malicious code in erubi (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9add1663a518f1688c3a014e351a0cba0fafb34a4e5270c74aa5102443fd88e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in erubi (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9add1663a518f1688c3a014e351a0cba0fafb34a4e5270c74aa5102443fd88e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48040 Malicious code in rails-html-sanitizer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6639c0a00dd79a8b017f59289f23eccd33625402399ac79c43d96fdb92e3b373 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48037 Malicious code in python-dotenv (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bf133022adafc8949f152dac2e99730580ca64a570cf0aeae36b7f81f3c1db9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48036 Malicious code in pyjwt (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1303df275ef90069cbd133d9486d1bd0732a401442c275a2c1ca4765fa940d5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in vite-plugin-opticompress (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2944281b796b865693c16f2bb84aa5a7e7060d92c19fe89079b20f7f4c63ba70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48017 Malicious code in vite-plugin-opticompress (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2944281b796b865693c16f2bb84aa5a7e7060d92c19fe89079b20f7f4c63ba70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cross-session (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46f6bdb0e17b0d49c9c3b316cc02bf5fb1964d956cd9a541c6fd2edd0eb5c551 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in async-chai (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 219d4f4b2ee4a3b5ad9499a019b0f6ce848b7ae5bdc38e72e6c68c24b2ba3c77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48014 Malicious code in async-chai (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 219d4f4b2ee4a3b5ad9499a019b0f6ce848b7ae5bdc38e72e6c68c24b2ba3c77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
The vulnerability of the cross-platform Xen kernel supervisor in Linux operating systems, related to synchronization errors when using shared resources, allows a perpetrator to compromise the vulnerable system.
The vulnerability of the cross-platform hypervisor Xen in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to compromise the vulnerable system...
python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments
Summary A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which the attacker previously gained access to the message queue that the servers use...