CVE-2025-3606

Vestel AC Charger version 3.75.0 contains a vulnerability that could enable an attacker to access files containing sensitive information, such as credentials which could be used to further compromise the device...

Malicious code in compat-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4afe39daa379d928222ec923465f7ac0593e4e1cd17e005cdccb0cbfaffe82e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helper-function-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf8d6cfb517715467379abc5d1adf9a80f10c786f6473f2d30c9961cba2445b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fatfingers-hahayeet2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b265d0af53100351e857e7122941420f14f207de723371c198bb1a273358c2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airbnb-embed-frame (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 376bf68663b9b18092bb92b3b07313218798ff34c1a714d205121ac55072e1ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @harvest-finance/harvest-strategy-arbitrum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 062f2e97a3824c2a6e95152cfe109cfeaa5426a6153438aad07eabee03820ba3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-16958 · Undefined · Undefined

🗞️ Apple Patches Two Actively Exploited Zero-Days in iOS, iPadOS, and macOS Apple fixes two zero-day flaws CVE-2025-37059, CVE-2025-37060 actively exploited in iOS, iPadOS, and macOS, risking data theft and device compromise. Update to iOS 18.4, iPadOS 18.4, or macOS Sequoia https://t.co/DTLP2ZYYs...

Malicious code in @csds-web-components/csds-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dae5a6c41775270cbe4eca04b93c31d39f47688db4b549ea73fed1157bf612c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lovenevergone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20e866f4799a4646da937fb6de1e5c1f17009416763ced88a6adb75b56508ff8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prettier-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e45dae9f24ebe77c9b7a50a5c45b3a141874389968d29e773f3f2aa8633a0a9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in niji-react-collapsible (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45517acf73604f16c7460249b78bcf46b0da5988629d8b62e6abc9551f349eac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mc5-adidas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a619866ee93765f22dfe1769c8a926d1b67e44fee683bd4cdf8d2da2b9a47f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tec-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2ef98a8d8e55d815b7f3d3955fb72a5387e95a9f22ab1702df9d88b2c152a18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paypal-product-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 702cb794363fc21a16f5752a5c2d307a7270f7304ea6d429da5c1fbba25ad3ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in backjob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 074cd355940e4bec045531e9dfda40f685949f00ecb1b0de74349a30d208d69d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tokesjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77cf2bffbafed158e996b9fb6581994a5dda5f00137197ee10e3538b2e68eeb9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pdftodoc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14520ac90732a33be79f604147753e91fe812ad121b9fffa4b573a6e6793ec50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dingpeng-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b75b0aa0d412d9ebbf20ed32ae7e5c4505eae72feb5ed57c0669192cb6ff8c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in app-bridge-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 933905ebdc76407c4ff291a44e25a77e8a04375225a902461a37355fbc45e0d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hellojpd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5216993f2a0d870809bc528d5b98b4577c5ee8891c30e6541d8d982bb93d9110 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...