CVE-2025-57439

Creacast Creabox Manager 4.4.4 contains a critical Remote Code Execution vulnerability accessible via the edit.php endpoint. An authenticated attacker can inject arbitrary Lua code into the configuration, which is then executed on the server. This allows full system compromise, including reverse...

CVE-2025-34206 Vasion Print (formerly PrinterLogic) Insecure Shared Storage Permissions

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA and SaaS deployments mount host configuration and secret material under /var/www/efsstorage into many Docker containers with overly-permissive filesystem permissions. Files such as secrets.env, GPG-encrypted blobs in...

Malicious code in fast-proxies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80cd3bbfb200cc0af579901773019a1d152ff4adda7764bbae1b9516e38a11c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in playground_root (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb5ac61f295a55d3954f84caefcd0b84187f168266243137208bba3f2e77f4fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47423 Malicious code in ng-imports-checker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18b18b9fde01428e5307224f34cca2ee013b4d455573e0da91abc9d6ee0c1438 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in capacitorandroidpermissions (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4db1dacd688bba52c2c6768ed56310450482ba27cf25b23de8a664943712b40d Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @things-factory/shell (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ebd494f09184269de61b62501f8b32bfc56c353807f7e7356cecc35c5ab1346 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @art-ws/config-eslint (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b89332826cb57152a8288941846a48e6ecb1d8d979bf641a288f740c34a0b99 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47384 Malicious code in @art-ws/ssl-info (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eec0e471971ebef2dcacdddb8d59cfcc0e53e699b37ed2954ff4ce0fc30318a1 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47295 Malicious code in airpilot (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 846d44d22101abc0b31169c4961dd524b15c20769cbc74a19e2119c6db6e174a Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47294 Malicious code in airchief (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d27bcc3bc35dd516704520eaafbd086947c4ca78d0f28945786da155acc1a73 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @crowdstrike/glide-core (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c50fb4842e12feb703463f76e42b30788a613940789be0e353b396b7de4cba8 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in cucumber-js-browserstack (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2f1891754984c705408dd02f9fb37660e1d4d84780ad4be25a83910d1eb789d Any computer that has this package installed or running should be considered...

MAL-2025-47231 Malicious code in 1xbet-prilozhenie-android-guid-bu43so24l (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 383835faaa1776818bfc30feef201e28a1895ab870057429200bca02bfcabf11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47252 Malicious code in @openzeppelin-compact/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9559f883ef8ce66f28f6c6f0e338ec3c10d5ba28c0e2dd2c7133f5268f7e539f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gatepass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61c2e9c4b5cbc80a41fd1b6bc9814d7354bc1aa20902ff0fe61a874828d171e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47314 Malicious code in gatepass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61c2e9c4b5cbc80a41fd1b6bc9814d7354bc1aa20902ff0fe61a874828d171e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in alert-codestreamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b406db84de56694d487b81b4123aafb61e290fea6b7921f521d94cd1843c6543 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47348 Malicious code in sensay-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cb7ee6c9001f05dabc23897e95ab73cf8e80b296c65d848d3d31fa9b2b592ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47356 Malicious code in ts-jito (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf71580a117fc1eb648238b8dbf5e2919978bc9bb694df76ef5b844542839736 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...