MAL-2025-48303 Malicious code in react-toast-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d97a357fa8e584e4b5afe4a19068c7294cec8af76786077c6064e611d1aa185 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @evo-tech/backoffice-test-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 931d6e176eaebf4b172dba6fd81800d7257f741ffad464c014dc9fcd085bcba4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-1.4.0.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8146c0e8e6a0aa9d6e7f8a6375cdbe84b7980976f86b1055aed3e84a19dcace7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-2.0.2.2.2.8. (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a417a96fb1a489ed21a97883097356cc05d7f014eee21d941bc0cf6a4541c036 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48222 Malicious code in redirect-ubp4cs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b184e6cfeb122b4bd7211f4d39a3b49f6900d58423cb5824a863fc2cf9b514c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-o92d2h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77f3c6a2ba50a265c6c612f8d9982534cea0e6b9441dec88bd1a7f428adfa8af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48152 Malicious code in redirect-e19jye (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a6122a3af15da86678978370ddd69e455fa6bf90a36c33791a482a7c003d106 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-63cl4f (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2812550ae381a965b1d3d0268c751c60bc5208a0bffd135bdef63456849476e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48159 Malicious code in redirect-fd91u6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3cdfdea3a7366fe091b0b276a32e9cfcbf518b624842338e9d5befc6c1fb843 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48145 Malicious code in redirect-cn040w (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25a017e32cbceb0365c659a0fc3f0649a71d0b52774c3d8002bcc808baa4d086 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-eeu53f (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cb93c87377f42581a57a298338e41779e5304e75b3e6418d51a15341a6f55c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-sormfb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5077214a1a7b6d8085d3e85f9e33151aa5ec8c2525c22648b00fa637e46bde67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-noyuan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfefab6bff187a106098b7be9862bc879253570f8cd1b97288bd2f4cadbdd08e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-60833

An XML External Entity XXE vulnerability in the /mall/wxpay/pay component of uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via supplying crafted XML data...

CVE-2025-60833

An XML External Entity XXE vulnerability in the /mall/wxpay/pay component of uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via supplying crafted XML data...

CVE-2025-60833

An XML External Entity XXE vulnerability in the /mall/wxpay/pay component of uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via supplying crafted XML data...

Malicious code in redirect-297vpk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9517560a65a1c1bbd91a87b0d971d3e19dfd28ae7a73c8e9dbdd842907d362e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48031 Malicious code in migration-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6df2c870c5d08b1672285eb7a008a6c1f960920bf35587f217d96c7f08051a14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zero-slot-utility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67e159cc709d3420c86d6676e754cc1f57818b21ccb863dba4d357ab6476c315 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

uzy-ssm-mall 安全漏洞

uzy-ssm-mall yuzu cloud e-commerce is an SSM framework by ghostxbh individual developer for building e-commerce, bookstore malls, customer management, and so on. A security vulnerability exists in uzy-ssm-mall version 1.1.0, which stems from the presence of XML external entity references in the...