51293 matches found
python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments
Summary A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which the attacker previously gained access to the message queue that the servers use...
Malicious code in simple-app-theme (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12841bf7b69cb4d4bbfe8fe7d87b976164b92187dae534f07331b5025779b542 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in 1uniswapinterface (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7829f154ef32af006e497f0229a2578cbf439ff13a8dd84e1673d53c56570779 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48003 Malicious code in raydiums1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware caaa5b95641731d67c04f3fd81e8b46d3df55f5408a6388dac6948e16635abbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in mad-5.0.1.2.2.8. (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fadd2947514f57c4785b87fb37e59a161d15ee5166bd00d809150cc3fdcb8cfa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in bildguga (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5232dd55f7737f8e53116826bf0c0e5ba9365eff238e7ba6d86b925d8d12babc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47987 Malicious code in apijsuni1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc739fcfc81f8d8dc67032dc5092aaa2e25b397bc838baf43d99e10dff110057 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48002 Malicious code in poolcake (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bb8f867e9caffbce415671d637f82bc49a3097df8d2cb5c3a41e464419a91e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48010 Malicious code in unitest2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aed7fa383be13086f76d33ea8cf0fb7262464155423ce6c74e8f46c1bf69f6fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48000 Malicious code in pancakepool (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aaab6dc9e6eb28a86ebbb9ef175624f2afd3649dd5b62ef87ca440b61468a688 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in poolcake (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bb8f867e9caffbce415671d637f82bc49a3097df8d2cb5c3a41e464419a91e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in raydiums1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware caaa5b95641731d67c04f3fd81e8b46d3df55f5408a6388dac6948e16635abbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48009 Malicious code in uniswappools (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a0b653b79b20ce2e2500a72394fe63b315bbd12824189928aac357539ea2166 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47997 Malicious code in mad-6.0.0.2.2.8. (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5985b89283068d01e7717bb168ba41e27404e7ce870f19f3778b09480208745 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in res-notification (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef24fa6bd07739f45e7e31a196535dc42562533848a3b3dcd6b7bc98b16ff4dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in kios (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d1a6fd29b8a60173e1e93d44f68fb2a9acb13751e32bc0293a3ac9d72ac1c9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in mapbox-gl-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d036b317c8c49cc8982dedb6417e57b1669e9dfc07159bf4a7e6fb136ff939c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47998 Malicious code in mapbox-gl-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d036b317c8c49cc8982dedb6417e57b1669e9dfc07159bf4a7e6fb136ff939c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...