Malicious code in ts-db-indicator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9556592a185a149af4a877ac348199cd0c69faf0fed158075c976b00585f8a3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flexible-loggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ff06dde8fdb6c689a2645607380a7a1d837f2b3b3c16ba52c2bb6bc1ea69d34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pcln-popver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 206369b24afc9df430dc47b2d41276f40aefa542db8d9edc65179445e8cb99be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @acesso-io/genoma-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b6ec7e7f5dedda767f62adfd6d1182431dce7b0f6d2b957becb48fe684e0654 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in meteor-roles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35e1fc58c157a731ac3f86cb748d151de5034b62c77de3149f0b97573789b402 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in placeholdr (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7d66d11f753c13ea251285ba697e1ec1be39a242effd08950d5fb3fff850ca7 Any computer that has this package installed or running should be considered...

CVE-2025-3927

Digigram's PYKO-OUT audio-over-IP AoIP web-server does not require a password by default, allowing any attacker with the target IP address to connect and compromise the device, potentially pivoting to connected network or hardware devices...

Malicious code in mymte2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc861b79eea3d82ab6dc25824fb7dad325622a6cbe4012fffe07ad7c198b4a73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-3606

Vestel AC Charger version 3.75.0 contains a vulnerability that could enable an attacker to access files containing sensitive information, such as credentials which could be used to further compromise the device...

Malicious code in compat-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4afe39daa379d928222ec923465f7ac0593e4e1cd17e005cdccb0cbfaffe82e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helper-function-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf8d6cfb517715467379abc5d1adf9a80f10c786f6473f2d30c9961cba2445b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fatfingers-hahayeet2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b265d0af53100351e857e7122941420f14f207de723371c198bb1a273358c2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airbnb-embed-frame (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 376bf68663b9b18092bb92b3b07313218798ff34c1a714d205121ac55072e1ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @harvest-finance/harvest-strategy-arbitrum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 062f2e97a3824c2a6e95152cfe109cfeaa5426a6153438aad07eabee03820ba3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-16958 · Undefined · Undefined

🗞️ Apple Patches Two Actively Exploited Zero-Days in iOS, iPadOS, and macOS Apple fixes two zero-day flaws CVE-2025-37059, CVE-2025-37060 actively exploited in iOS, iPadOS, and macOS, risking data theft and device compromise. Update to iOS 18.4, iPadOS 18.4, or macOS Sequoia https://t.co/DTLP2ZYYs...

Malicious code in @csds-web-components/csds-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dae5a6c41775270cbe4eca04b93c31d39f47688db4b549ea73fed1157bf612c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lovenevergone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20e866f4799a4646da937fb6de1e5c1f17009416763ced88a6adb75b56508ff8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prettier-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e45dae9f24ebe77c9b7a50a5c45b3a141874389968d29e773f3f2aa8633a0a9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in niji-react-collapsible (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45517acf73604f16c7460249b78bcf46b0da5988629d8b62e6abc9551f349eac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mc5-adidas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a619866ee93765f22dfe1769c8a926d1b67e44fee683bd4cdf8d2da2b9a47f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...