CVE-2025-53769

External control of file name or path in Windows Security App allows an authorized attacker to perform spoofing locally...

CVE-2025-53769

External control of file name or path in Windows Security App allows an authorized attacker to perform spoofing locally...

Windows Security App Spoofing Vulnerability

External control of file name or path in Windows Security App allows an authorized attacker to perform spoofing locally...

PT-2025-32851 · Microsoft · Windows Security App

Name of the Vulnerable Software and Affected Versions: Windows Security App affected versions not specified Description: The Windows Security App contains a flaw related to external control of file names or paths. This allows an authorized attacker to perform local spoofing. Recommendations: At t...

Malicious code in vite-log-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e278049c2919582d9fdb72033c214b715cd3cf34a0a80051a894185c4f669207 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsonlise-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf082fc7a0245d35242f1e0d04f639029dcca292f35ffa61b5ac38c64550d6eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dc-dependencyv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1bceba71bc1fb5763544f1b3d59a2e3700738d0e6293319a1b3d20b3e3d3956 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wb3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e87f4d934640afbd1d8d2deecd75fb681e94cee807f301d6643bf09e55c699e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crypto-com-developer-platform-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3ba03d0d0285dec410f541b8e7fb12a809792658d08b88105efe3ecf507350b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cookiefunctions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8afa900a1619d7588b19e54f31e967476f48fc0d956d06cd6dd045d965d36a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in homiersla (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18b688a5a2d22b21d1e643d311c8364a0d6d26d28c537c6e4fbf1a00f7dc12ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grafana-iot-twinmaker-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7f0ee041fd32ff1222732d276760eea9a8547107ad0492a0654088ddfb85381 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in css-keylogger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d7d5c0eac76577da5186e985efd72018e773d9ada891e44852188b9e5cd8632 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sync365 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2003136f074fe6e477c1a6a3458258fb4a9b375093b0520cafc082e4ff537f39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in n8n-nodes-mtaitest-abc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44affea7a9444f2719826698691368c8040059c5aed1cc7b939116cf11b7d90c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-babel-purify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dff19821615932cec55e91b56b5ef7b8974f053d6ec9dab32417601d23391b52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chunk-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2ede01f53bb06fadc20c1b7cca9c6d00685c017c3d99901a5cd8791140e2ddd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5567 Malicious code in myrepotesting-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 699a8d5ecf04b9f79eb58425d416193bbb768ed786ea839d85fd4f46e827d017 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in telehealth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1341fa0434bd6d34d4cd7c6e981f3454a6c1f5fc415c6fed9415ffa817d4721f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5343 Malicious code in babel-plugin-nordic-module-resolver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 197703c7e1ebc42cf3d8e4165e4ea956d224b3a7724ad68d0e354ac7b7ff45ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...