Malicious code in optional-native-module (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb3a52068ea70ee162c5956b77baeabb8d46582ae8c096ce97fc7ba4fb7ef37a Any computer that has this package installed or running should be considered...

Malicious code in pahtkit-wasm (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3e76975e429f523a3fae3ff739755780b9f6f01a170517550cf8de743a585a8 Any computer that has this package installed or running should be considered...

Malicious code in theia-killercoda-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 327422d1afb4b6b92f4af1ab86ec0f1ca00db649a7e7911231134aa463e1a8e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yui2-animation (npm)

The package yui2-animation was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 075f8fc51a15a005755c226c80fb0355dda105449ade6f949deced74ddbd7b56 Any computer that has this package installed or running should be considered fully...

MAL-2025-42151 Malicious code in moodle-core-lockscroll (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4593d2f53dfa6444f6bc77ab415228cf1bb76f6ffc3e62b0973033f33bf3edd Any computer that has this package installed or running should be considered...

Malicious code in moodle-core-notification-dialogue (npm)

The package moodle-core-notification-dialogue was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0744d3959a7e6cf0b70432a2b72939c580eb705bf7e14a8f4569ae3e0f571164 Any computer that has this package installed or running should be...

MAL-2025-42155 Malicious code in moodle-core_filepicker (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 949643a56d52397b063c5839facff57f6727e833e3f48ffaa24500c64ac29d53 Any computer that has this package installed or running should be considered...

Malicious code in panel-keylogger-sim (npm)

The package panel-keylogger-sim was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddef5ca6a0aead05fafecfc9b6500798ffcd3d1e85048cd8c193233715be20e4 Any computer that has this package installed or running should be considered fully...

MAL-2025-42156 Malicious code in panel-keylogger-sim (npm)

The package panel-keylogger-sim was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddef5ca6a0aead05fafecfc9b6500798ffcd3d1e85048cd8c193233715be20e4 Any computer that has this package installed or running should be considered fully...

PT-2025-36342

Name of the Vulnerable Software and Affected Versions: AMD TEE affected versions not specified Description: Insufficient bounds checking in AMD TEE Trusted Execution Environment could allow an attacker with a compromised userspace to invoke a command with malformed arguments, leading to...

Malicious code in logging-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0433a58c0d2019ba753b2ac69bc12319ce704bc3fcf7ff537ccea2164e1e8f31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-42145 Malicious code in logging-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0433a58c0d2019ba753b2ac69bc12319ce704bc3fcf7ff537ccea2164e1e8f31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-42146 Malicious code in rtk-wake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fc493187ac88a35f426edb64ab97f58fcd188ce208058c832d5bd05143ec899 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GhostRedirector Hacks 65 Windows Servers Using Rungan Backdoor and Gamshen IIS Module

Cybersecurity researchers have lifted the lid on a previously undocumented threat cluster dubbed GhostRedirector that has managed to compromise at least 65 Windows servers primarily located in Brazil, Thailand, and Vietnam. The attacks, per Slovak cybersecurity company ESET, led to the deployment...

CVE-2025-58357

5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Version 0.13.2 contains a vulnerability in the chat page's script gadgets that enables content injection attacks through multiple vectors: malicious prompt injection pages, compromised MCP server...

If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.

...

CVE-2025-58357

Summary: 5ire (desktop AI assistant) vulnerability in the chat page’s script gadgets leads to content injection via multiple vectors (malicious prompt injection pages, compromised MCP servers, exploited tool integrations). Affected version: 0.13.2. Impact: allows content injection; CVSS 3.1 base ...

MAL-2025-42138 Malicious code in mathy-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40181e61c8885579610a7982c1d9bb6de781022905e9b58618fd8206ba45347b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-42140 Malicious code in tailwind-react-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a5127a22fb572ebcffe8d5b7a31ef0ceeedc9113e7e1666b1a23384f0ae3cca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-42139 Malicious code in tailwind-config-overrides (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ac45edafa6ddcf4af5c1970929875bc85e162994b1e4a7e3f607529e1425763 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...