Malicious code in @zalastax/nolb-_hyper_fun_fluentui-icon-i (npm)

The package @zalastax/nolb-hyperfunfluentui-icon-i was found to contain malicious code...

MAL-2025-10099 Malicious code in @zalastax/nolb-_hyper_fun_fluentui-icon-h (npm)

The package @zalastax/nolb-hyperfunfluentui-icon-h was found to contain malicious code...

MAL-2025-9669 Malicious code in @wisetail/wds-icon (npm)

The package @wisetail/wds-icon was found to contain malicious code...

MAL-2025-19228 Malicious code in edx-icon (npm)

The package edx-icon was found to contain malicious code...

MAL-2025-38508 Malicious code in vite-css-icon (npm)

The package vite-css-icon was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in awesome-icon (npm)

The package awesome-icon was found to contain malicious code...

Malicious code in @zalastax/nolb-_hyper_fun_material-icon- (npm)

The package @zalastax/nolb-hyperfunmaterial-icon- was found to contain malicious code...

Malicious code in @zalastax/nolb-_hyper_fun_material-icon (npm)

The package @zalastax/nolb-hyperfunmaterial-icon was found to contain malicious code...

MAL-2025-15215 Malicious code in awesome-icon (npm)

The package awesome-icon was found to contain malicious code...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2025-50154, CVE-2025-59214 Windows File Explorer Zero C...

Malicious code in react-qrcode-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7415d66ef3e5a6e0067c5808f2f7929a2e7ec2b74003252747a89dfe7341b50b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview react-qrcode-icon is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in react-icon-maker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46dc16e0765ddb06bcc46c49b58deba17ff9d4fce6cc5b65ebba0f617cf44fed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview react-icon-maker is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-6370 Malicious code in react-icon-maker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46dc16e0765ddb06bcc46c49b58deba17ff9d4fce6cc5b65ebba0f617cf44fed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6371 Malicious code in react-qrcode-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7415d66ef3e5a6e0067c5808f2f7929a2e7ec2b74003252747a89dfe7341b50b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Important: gimp

Issue Overview: GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

MAL-2025-5881 Malicious code in @vapc-ui/font-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd90c9c485b4d7e6b450d510ae8e7196fc5ad78f7d4f397267056dace122ab38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Favicon Trojans: Executable Steganography Via Ico Alpha Channel Exploitation

This paper presents a novel method of executable steganography using the alpha transparency layer of ICO image files to embed and deliver self-decompressing JavaScript payloads within web browsers. By targeting the least significant bit LSB of non-transparent alpha layer image values, the propose...

gimp: GIMP ICO File Parsing Integer Overflow

An integer overflow vulnerability was found in Gimp's handling of ICO files. This vulnerability can lead to code execution if a user is convinced to open a maliciously crafted file...