Malicious code in @testcarrot/supply2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c6b1ac7e0d732e96fb12ebfc09964c4e8a5a58fb8b0a2dc11dab3fad6c78359 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-P543-XPFM-54CP vulnerabilities

Vulnerabilities for packages: ruby3.3-rack, ruby4.0-rack, gitlab-cng, ruby3.4-rack, ruby3.2-rack, gitlab-rails-ce, ruby3.2-rails, ruby3.3-rails, logstash, ruby3.4-rails...

GHSA-4789-QFC9-5F9Q

creationtimestamp| type| source ---|---|--- 2025-10-07 19:38:33+00:00| seen| https://seclists.org/oss-sec/2025/q4/17...

GHSA-G8C6-8FJJ-2R4M

creationtimestamp| type| source ---|---|--- 2025-10-06 16:19:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115328125762428936...

GHSA-76R2-C3CG-F5R9 vulnerabilities

Vulnerabilities for packages: openssl...

EUVD-2024-1442

Malicious code in bioql PyPI...

GHSA-5RJG-PF4Q-HGCR vulnerabilities

Vulnerabilities for packages: gnupg...

GHSA-CR7Q-2W66-HJCM vulnerabilities

Vulnerabilities for packages: nemo...

GHSA-4FGQ-FPQ9-MR3G

creationtimestamp| type| source ---|---|--- 2025-10-03 13:12:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115310405072880606...

GHSA-FMJH-F678-CV3X vulnerabilities

Vulnerabilities for packages: hydra, weaviate...

GHSA-XCH9-H8QW-85C7

creationtimestamp| type| source ---|---|--- 2025-10-02 12:35:16+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115304596433685168...

GHSA-7232-97C6-J525

creationtimestamp| type| source ---|---|--- 2025-10-02 12:35:15+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115304596433685168...

GHSA-W2HG-2V4P-VMH6

creationtimestamp| type| source ---|---|--- 2025-10-02 12:32:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115304586574138947...

Malicious code in react-content-parser (npm)

The package react-content-parser was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed262514ac58c1f13a4761aa92199769727342ebbd70431d112061e34da94a00 Any computer that has this package installed or running should be considered fully...

GHSA-7229-Q9PV-J6P4

creationtimestamp| type| source ---|---|--- 2025-09-28 09:16:19+00:00| published-proof-of-concept| https://t.me/cKure/15460 2026-07-09 03:00:06+00:00| seen| https://t.me/brutsecurity/2267 2026-07-10 00:00:13+00:00| seen| https://t.me/brutsecurity/2267 2026-07-11 11:00:04+00:00|...

Malicious code in postman-json (npm)

The package postman-json was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63e81e735aa1583841441847e7de0a269d581efabcfdcdac7cb7d6afd64df258 Any computer that has this package installed or running should be considered fully...

GHSA-954C-JJX6-CXV7

creationtimestamp| type| source ---|---|--- 2025-09-25 01:51:39+00:00| seen| https://gist.github.com/JordoTaylor/386435f386c4c6cdbd5eaa512832d448...

GHSA-6PX8-22W5-W334

creationtimestamp| type| source ---|---|--- 2025-09-23 02:51:25+00:00| seen| https://gist.github.com/konard/308afa54a32c9f1918f70f1cb1bdd50b 2025-09-23 03:04:11+00:00| seen| https://gist.github.com/konard/0588944bf0af8e1132d0c68d1c1d2711 2025-10-26 10:04:24+00:00| seen|...

Dotnetnuke < 10.1.0 Stored Cross-Site Scripting (XSS) in Prompt module (GHSA-2qxc-mf4x-wr29)

According to its self-reported version, the instance of Dotnetnuke running on the remote web server is prior to 10.1.0. It is, therefore, affected by a vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Malicious code in eslint-config-detector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c532e5d9ed3c3afdaf7a4a59234c132c6176b491fc96676828c4f0dd5eb415c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...