5867 matches found
Malicious code in reactify-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33fa7e90d4152416b1c914f2f869a4b26ea6afb25a672834b497be10bcea138a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-7RC8-5C8Q-JR6J
creationtimestamp| type| source ---|---|--- 2025-10-20 20:38:54+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115408419666821301...
@aem-screens/franklin-variation-creator (1.0.0-B001), @akord/ui (>=3.4.1, <=3.15.4) +180 more potentially affected by CVE-2025-11849 via mammoth (>=0.3.33, <=1.10.0)
mammoth NPM version =0.3.33, =3.4.1, =0.0.1, =1.0.0, =0.0.9, =0.1.5, =1.2.1, =1.4.2, =1.0.34, =1.2.1-a, =1.0.0, =1.2.2, =0.0.7, =0.2.5 and more Source cves: CVE-2025-11849 Source advisory: OSV:GHSA-RMJR-87WV-GF87...
GHSA-WPP5-4W35-PXQ6
creationtimestamp| type| source ---|---|--- 2025-10-16 18:01:12+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115385150455454568...
GHSA-PQ5P-34CR-23V9 vulnerabilities
Vulnerabilities for packages: mlflow...
GHSA-W8RW-FQGJ-9R49
creationtimestamp| type| source ---|---|--- 2025-10-15 05:18:04+00:00| seen| Telegram/tUs9xFu7TBVlTPUEM9m4RC6lHahBZ6SnUt77YiPOCj4tao...
GHSA-2J3H-J2Q3-WXP3 vulnerabilities
Vulnerabilities for packages: fontforge...
GHSA-MWVV-Q9GH-GWXM
creationtimestamp| type| source ---|---|--- 2025-10-13 22:17:56+00:00| seen| Telegram/AvB3f2VXJ78nxiEggbsGlkBj-on5ZVuFRFknQTi-qc2jM...
Malicious code in internallib_v125 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab77b49975a46f2335153950e340dc04f11da41aebe8c463f96f99d7e831fff6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-RWVP-R38J-9RGG vulnerabilities
Vulnerabilities for packages: trufflehog, trufflehog-fips, wolfictl, mattermost, grype-fips, k9s, cg, gitleaks, zarf, grype, syft, syft-fips, gptscript, filebrowser, undock, chainctl, kubescape, nuclei, chezmoi, k9s-fips, grype-db, gotenberg, kots, mattermost-fips...
GHSA-3F6C-7FW2-PPM4 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-12.4...
GHSA-49G5-F6QW-8MM7 vulnerabilities
Vulnerabilities for packages: python...
Malicious code in chai-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 975b6ac20ebe483ebacc5aac930cd8efb123c6f3e9c68d18bf72c0e42c1787ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48157 Malicious code in redirect-ewce43 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d3a83cfe9df44f0743b065c4c13d3e28fb674fdd00d29200036c53697af96ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48154 Malicious code in redirect-elvwba (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c14e9416f39f79fd57b93fde303c49ec9c250008b3cef0bfd26c4eceed6da7b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in redirect-t09ul0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90ca8a1ed9e79de9fab0cccb2691d3d08e819e858489a95b13385bbc6437e022 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48144 Malicious code in redirect-cj50k2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bf557860ebd2c98ec4729637d4e893ebe732fbb3c8f460b9e8d87abbd473f1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-W9PC-FMGC-VXVW vulnerabilities
Vulnerabilities for packages: ruby3.3-rack, ruby4.0-rack, ruby3.2-rack, ruby3.4-rack, gitlab-cng...