Malicious code in weex-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b584007c16319ecc4cbb0dadad514e12e33872b44707c476ea044b163bfc335e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in orangex-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72138d591e4116ce9a82ea1b145e24a0dd98ffb5ae09004a2b9b447b87afb2c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in p2pb2b-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a0473d0f0125406881ecf6afe601b962e4ebfb4dd7aee64effa8444f4a84be1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1400 Malicious code in coinstore-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58dfe66499691e4a2a71a5bd5f3660d8db97c4fbf7f662f3e24b4c0ed0cff3a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1438 Malicious code in tbasdzqdl55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 839e4e7903c73d714b549caf9b44abb2b9e1167d17f45929dee4cdd4e28f17eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pages-e2e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8fdc9ed5e9c2f9d6d0e57ed2a060d76ead69858fcbae60c4265500ef4dd1527 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in genesys-richmedia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0961665538e0d2d003567292d856ba063d66f2dc4ffa8cd8fbf50ea8e65a2645 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-26358

A CWE-15 "External Control of System or Configuration Setting" in ldbMT.so in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to modify system configuration via crafted HTTP requests...

CVE-2023-40721

A use of externally-controlled format string vulnerability CWE-134 vulnerability in Fortinet allows a privileged attacker to execute arbitrary code or commands via specially crafted requests...

CVE-2024-12058

External control of a file name in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a remote authenticated attacker with admin privileges to read arbitrary files...

Fortinet FortiOS，FortiProxy和FortiPAM 格式化字符串错误漏洞

Fortinet FortiOS and others are products of Fortinet, Inc.Fortinet FortiOS is a dedicated security operating system on the FortiGate network security platform.Fortinet FortiProxy is a secure network proxy that protects employees from cyber attacks by combining a variety of detection technologies...

Ivanti Connect Secure和Ivanti Policy Secure 安全漏洞

Ivanti Connect Secure ICS and Ivanti Policy Secure IPS are both products of Ivanti Corporation, U.S.A. Ivanti Connect Secure is a secure remote network connection tool.Ivanti Policy Secure is a network access control NAC solution. A security vulnerability exists in Ivanti Connect Secure prior to...

Malicious code in internallib_v789 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58ef96477214541474a78705d81d93f2cee8bfdff72d03bc45f30c6431bacfb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in reqmanagemedifdt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97e2cacdc4d9372c4099fc0e97f74387c54414cdf62323f935941b445a2c3e9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in etsy.github.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1fb9f5d727a671b0737c22729a92ad2c27b39f8dff89f17f5188dc58134b805 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v331 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7396dc02a5405a71efdc0e63b0eaca22d4ba3161189c8366d3bb835fc7a18b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1147 Malicious code in link_paidy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdfe9b3503d7194728ebecc39e0d09408445eb8ee385498be3181237bb3b068d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in twitter-cldr-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6922d34a8a37d6986abdb98a1e9cfebc0151ed16d0b43cb410e9872171a62a79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blocto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e997c352502b7ddd39617ab41ede149ae5674ddff4126238e28dc662da73d24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lighthousebenchmarks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d28d7104583993cdedace4854b357cc6153c3dfbe0fea21886921324177c833 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...