MAL-2025-3856 Malicious code in spl-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86e0efcb779c43be336174a24f04614ab82be9f92a235feaf6e344d814bb2789 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3781 Malicious code in sw-cur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b6e97eb66e9295d27e2c439734b0d7a8a4479ea22612dd7c5623827fcbb53eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3626 Malicious code in internallib_v921 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2d85ca5bec57f8bdf71ccddd637037d50c3a8d215c375ab6bcfba881c336175 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3638 Malicious code in node-jwt-simple (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b327dac41c47c206948d7e146a6174435ee74981c5726827f68050b3692060a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3717 Malicious code in gql-test-client (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc1a4e0775ef3923d488773c12cfaaa56a985b4f914af402f9598ea0d564b883 Any computer that has this package installed or running should be considered...

MAL-2025-3581 Malicious code in next-log-patcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfce41719d550a7097080921b8d71c939042745806269bbd66ba0e2033dee574 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3387 Malicious code in dowload_ebok_a_bela_e_a_fera_by_elizabeth_rudnick_evan_spiliotopoulos_stephen_ch_9ooey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf3075ed01e988b75ffe573ce85b459ad0e7a1f3a4811aeff563b24af9d9ee54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3392 Malicious code in dowload_ebok_si_la_verdad_te_incomoda_no_leas_este_libro_by_armando_r_manjarres_0qwta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 423ed02534dc5f69e700f584aa2650eeb9221a31037dbeb366660c166801552d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-30737

CVE-2025-30737 affects Oracle Smart View for Office (Core Smart View) and is documented for version 24.200. The vulnerability enables a high-privileged attacker, with network access via HTTP, to compromise the product. Exploitation requires user interaction from a person other than the attacker, ...

CVE-2025-30730

The CVE-2025-30730 entry concerns Oracle E-Business Suite’s Oracle Application Object Library (Core), affected in versions 12.2.5–12.2.14. The vulnerability enables an unauthenticated attacker with network access via HTTP to cause a hang or a frequently repeatable crash (complete DoS) of Oracle A...

MAL-2025-3211 Malicious code in flex-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 004deff66b34b25158642a09f2766c44910f05ec7a322c2933f768f34249151b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3190 Malicious code in highcharts-mouse-wheel-zoom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd3e7a1a5ccec6d7ad964e3183a5e78bcfd9722281b8205094e72ffcda8c26d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3099 Malicious code in fivethirtyeight (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d85a317f633c161ef61f2ffd3d0cda992cf670bd7532a2ce875261ba067a39d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3089 Malicious code in accessible-textbook-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32e7a797f9a6dff7e1c114b0da31a73df0a0cda2dc4590c5512d243f32dc90b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3127 Malicious code in windowsreveal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45eb7752fa24f9edaffa6707ee8ec4e0b1684a637d4d1cc1f6a003d040039332 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Tiger Theme <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Software Tiger Type Theme Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-31407 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 7418cf31bc7a Credits Mika Required privilege Subscriber Published 2...

MAL-2025-2787 Malicious code in smart-file-renamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28b650ad09355a36c0fcdb91255b1bcb59984a12295de8a0a88ac5735c29f7f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2673 Malicious code in gaimes-fun (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa65f4433275ee9c01057f21b5c3be7d3f23b729e2525a56cbaf26e3d564838f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2574 Malicious code in migu-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecb336887faf02039935f114ebb2564586a99bfe58a39d4ab59b3899818e1dc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3143 Malicious code in arnotest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64475736790097a8b2e30db87aa02796673e4a50b3af8e0d633eb261ec376983 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...