2382 matches found
MAL-2025-4651 Malicious code in parabol-action (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d82468091c3a867fd7981eef0555f14edc29822f932782c0fac1bf9e67a15d7e Any computer that has this package installed or running should be considered...
MAL-2025-4632 Malicious code in rose-web3-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86e7bba39177d14d11698b3ccaeca36599df068894146efc99d0ded173449d9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4614 Malicious code in rosetta-elements (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 223577bf445eef54d28cca3d3d2015b497b5c23838c938f2a48411440b05f614 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4637 Malicious code in @majidalfuttaim/maf-ui (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2330446b43c4350ffd756e057399577c16b5b7b20767a3a71fc73b20664fe62 Any computer that has this package installed or running should be considered...
Security Bulletin: IBM Maximo Application Suite Predict Component : Flask is a web server gateway interface (WSGI) web application framework. In Flask 3.1.0, the way fallback key configuration was handled resulted in the last fallback key being used.
Summary Security Bulletin: IBM Maximo Application Suite Predict Component Component uses Flask is a web server gateway interface WSGI web application framework. In Flask 3.1.0.This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-4727...
MAL-2025-4587 Malicious code in ethereum-smart-contract (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e10c205ca79402ee59b57b5e2a0475562ba75988af429715c808ad690e6fa49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4588 Malicious code in pancake_uniswap_validators_utils_snipe (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 791d7ac8f5692ffcb4db92ed0986a9f6c422640fbbe19c1522dbbc0f813aaeb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4528 Malicious code in gitdependencyresource (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83fef2647750041b69c08748c2113e2bacb9b4cb630d247951daa865f4ef7743 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4464 Malicious code in airdrop-interface-markets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 159a4dce9883ef2c1edd948d35a42feea7e9a7c3ac873bbc1a28e54f9b482004 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4475 Malicious code in crypto-base-class-new (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6367d8d4ea69716ade6df0bdc1288d33b7d0028c1e4416d2dc3f587f853cfe5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4492 Malicious code in nayan-apis-servers (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a500808f6303d2da4576b49076cf7171323167850ff6890ee9dcb7f801786489 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4479 Malicious code in geeztdmailmodule (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ca73c4aa0b2964fe2de6bb1e1ee6f1b4784f8db098f2b46fb200a9217f1dfa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4477 Malicious code in firefox-screenshots (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d3138a26b7ea5f91361ed825aad5e3dc068f6b6655b68dd357565767f5ed968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4478 Malicious code in front-exporter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3722d7f5ad91f5a20aeeec9851391de8a664028ba2cedcc130c247042c459ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4503 Malicious code in skinnyvans-darwin-arm64 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7c46b0e2fd5826ee3bdd4b6d38a695126f358eaa2be3ea79a33dea0667db347 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4504 Malicious code in skinnyvans-darwin-x64 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b640328fee2106b3dea2217776fa00ee07982e485871045f8e3be307311062d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4495 Malicious code in nistagram (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d6ca9092341ced6379d414f9e438aabd38664481134f9685c69b43ce977247c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4521 Malicious code in wise-plugins (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07407468d93ffb1f67aabfd6c608443ec2a8d822ade6a98f3b9f6387178fba80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Ubuntu: Security Advisory (USN-7534-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...