Malicious code in dynatrace_config_manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a8f0e753dc778e5f7193c11f8e1051da139ce2d2322f0b7c678e0aec6d11746 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-333 Malicious code in dynatrace_config_manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a8f0e753dc778e5f7193c11f8e1051da139ce2d2322f0b7c678e0aec6d11746 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-288 Malicious code in create-calypso-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df093bf0b3032586592d593a554c740ebe09f794cffc403f26b07319dd426d84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in create-calypso-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df093bf0b3032586592d593a554c740ebe09f794cffc403f26b07319dd426d84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-285 Malicious code in calypso-typescript-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc88471b8b8d98c729b5e4e741f7a4730627918e7f07353ebf02bb22fe52727f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-295 Malicious code in eslint-config-atlassian-fecq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2dec5c0511ddd42ff4442d47dd77fed92c193dbb7a478850e568766c16d79986 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in calypso-typescript-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc88471b8b8d98c729b5e4e741f7a4730627918e7f07353ebf02bb22fe52727f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in calypso-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c632a7ae908f27bebfc5797a394543dbf298fa2b1f79197077b9227c243a5fda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-280 Malicious code in calypso-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c632a7ae908f27bebfc5797a394543dbf298fa2b1f79197077b9227c243a5fda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-277 Malicious code in calypso-babel-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b19b336747cffb6dcd17e2bdf7369eaeffb28fe85d0c8198710e89dbced26e94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in calypso-babel-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b19b336747cffb6dcd17e2bdf7369eaeffb28fe85d0c8198710e89dbced26e94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-3QC3-MX6X-267H Insecure default config access in WriteFreely

WriteFreely through 0.15.1, when MySQL is used, allows local users to discover credentials by reading config.ini...

Malicious code in eslint-config-smaato (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db0a05213eccd279084fc7d5d7545e8ddd2b658f9db8a890b1994b4c9a6d6953 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-185 Malicious code in eslint-config-smaato (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db0a05213eccd279084fc7d5d7545e8ddd2b658f9db8a890b1994b4c9a6d6953 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solhint-config-keep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d611bf7c2cb3e747177ac0214f0264fda6c7e83ed1a1f3a3aaf5327bf3bea388 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-243 Malicious code in solhint-config-keep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d611bf7c2cb3e747177ac0214f0264fda6c7e83ed1a1f3a3aaf5327bf3bea388 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-24337

WriteFreely through 0.15.1, when MySQL is used, allows local users to discover credentials by reading config.ini...

CVE-2025-24337

CVE-2025-24337 : Affects WriteFreely up to version 0.15.1 when using MySQL. Local users can read the config.ini and disclose credentials due to insecure default config access. The impact is credential disclosure (confidentiality and integrity) for local attackers; exploitation is local. The provi...

CVE-2024-56515

Matrix Media Repo MMR is a highly configurable multi-homeserver media repository for Matrix. If SVG or JPEGXL thumbnailers are enabled they are disabled by default, a user may upload a file which claims to be either of these types and request a thumbnail to invoke a different decoder in...

WordPress TinyMCE Extended Config plugin <= 0.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika in WordPress Plugin TinyMCE Extended Config versions = 0.1.0...