Malicious code in vite-css-icon (npm)

The package vite-css-icon was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-17575 Malicious code in core-icon (npm)

The package core-icon was found to contain malicious code...

MAL-2025-9669 Malicious code in @wisetail/wds-icon (npm)

The package @wisetail/wds-icon was found to contain malicious code...

MAL-2025-10099 Malicious code in @zalastax/nolb-_hyper_fun_fluentui-icon-h (npm)

The package @zalastax/nolb-hyperfunfluentui-icon-h was found to contain malicious code...

MAL-2025-19228 Malicious code in edx-icon (npm)

The package edx-icon was found to contain malicious code...

MAL-2025-38508 Malicious code in vite-css-icon (npm)

The package vite-css-icon was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-15215 Malicious code in awesome-icon (npm)

The package awesome-icon was found to contain malicious code...

MAL-2025-10100 Malicious code in @zalastax/nolb-_hyper_fun_fluentui-icon-i (npm)

The package @zalastax/nolb-hyperfunfluentui-icon-i was found to contain malicious code...

Malicious code in @zalastax/nolb-_hyper_fun_material-icon (npm)

The package @zalastax/nolb-hyperfunmaterial-icon was found to contain malicious code...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2025-50154, CVE-2025-59214 Windows File Explorer Zero C...

CVE-2025-7500: Improper Neutralization of Input During Web Page Generation

The Ocean Social Sharing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via social icon titles in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...

Malicious code in react-icon-maker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46dc16e0765ddb06bcc46c49b58deba17ff9d4fce6cc5b65ebba0f617cf44fed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-qrcode-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7415d66ef3e5a6e0067c5808f2f7929a2e7ec2b74003252747a89dfe7341b50b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview react-qrcode-icon is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview react-icon-maker is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-6370 Malicious code in react-icon-maker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46dc16e0765ddb06bcc46c49b58deba17ff9d4fce6cc5b65ebba0f617cf44fed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6371 Malicious code in react-qrcode-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7415d66ef3e5a6e0067c5808f2f7929a2e7ec2b74003252747a89dfe7341b50b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in react-qrcode-icon

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in react-icon-maker

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Important: gimp

Issue Overview: GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious...