MAL-2025-3251 Malicious code in helper-compilation-targets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e897d466d55977bfca32e3649ff28dc2c596464148f4f4de72f24c59191298d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fatfingers-hahayeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab10b9a2ff027ef8bfac4c8953e64c6a24e799afecb082e727da93d58fd0cb47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dc-genai-dropin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4921314e7e97ba500355f996a14c9619cadf54912d2dfdbe5eb22750a5e5c1c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3259 Malicious code in juvare (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d66c69dea5e4d686a284a2d0f9e5260a58a90498ab4ff924f3928fe356f741a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in responsive-pitch-fx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d668a688ecd5c7cb1ff11b793e7a8664fff947988627a1e0ff5be58aedc02bd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ezidox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77793c97cf9e01c68e50b8c80e44f0591a67a78cbcd13b931f43cb56dc7fe0b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in glog-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 971dcb9a7fdae650e637fc12c4045cf4c7e8cac575b4d6f6c18d93ba115e5f70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @talentai/carbon-addons-talent-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 882f23d36229f817eef192caf4e51f3164ffbd979660fa81389291a6b522e857 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3209 Malicious code in @talentai/carbon-addons-talent-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 882f23d36229f817eef192caf4e51f3164ffbd979660fa81389291a6b522e857 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3211 Malicious code in flex-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 004deff66b34b25158642a09f2766c44910f05ec7a322c2933f768f34249151b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Lenovo PC 缓冲区错误漏洞

Lenovo PC is a line of computers from the Chinese company Lenovo Lenovo. A security vulnerability exists in Lenovo PCs that stems from an input validation weakness that could allow a locally privileged attacker to read the contents of memory...

MAL-2025-3192 Malicious code in lme4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d886ca0d77375a13d7b0c7d522f2dae6e996f8d069f1337810a23c86e040412 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deltaprime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f16f2e9ed1af46506269c020785db3858769c420b642162e9fa880a6d2152edb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3180 Malicious code in cors-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c69784e687ee2d3b4fa3c9466d05fee6ba509336504718d4b993d75c7498176 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in data-memocombinators (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 392ef8199fed690581519bcc38f5cb1dcc29af2196b24b72a3c21df826f531cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3185 Malicious code in esy-m4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d50f3c1994b8efe53e778d8ba331e1ceec48993b57b0fc3f279eb3f4b9dea361 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Zohocorp ManageEngine ADManager Plus 7210 - Elevation of Privilege

Exploit Title: ManageEngine ADManager Plus Build 7210 Elevation of Privilege Vulnerability Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://www.manageengine.com/ Software Link: https://www.manageengine.com/products/ad-manager/ Details:...

MAL-2025-3145 Malicious code in boss-traceid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 989a91e00c66bddcabf2d2aa4d190e543394315ecef80cbe38c70a3f85a00cc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nusign (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5abb5aed02d3e6ddea2218e353719dd67a4a00bdc801c4347a7ed49f8f08a1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3149 Malicious code in damnbeauty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 253e91eb04c8d507dcc87bb3cf8614080f61c2c28753ee3b44b31e8103304e38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...