MAL-2025-4477 Malicious code in firefox-screenshots (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d3138a26b7ea5f91361ed825aad5e3dc068f6b6655b68dd357565767f5ed968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4478 Malicious code in front-exporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3722d7f5ad91f5a20aeeec9851391de8a664028ba2cedcc130c247042c459ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4504 Malicious code in skinnyvans-darwin-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b640328fee2106b3dea2217776fa00ee07982e485871045f8e3be307311062d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4503 Malicious code in skinnyvans-darwin-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7c46b0e2fd5826ee3bdd4b6d38a695126f358eaa2be3ea79a33dea0667db347 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4495 Malicious code in nistagram (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d6ca9092341ced6379d414f9e438aabd38664481134f9685c69b43ce977247c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4521 Malicious code in wise-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07407468d93ffb1f67aabfd6c608443ec2a8d822ade6a98f3b9f6387178fba80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ubuntu: Security Advisory (USN-7534-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7534-1 flask vulnerability

It was discovered that Flask incorrectly handled key rotation. An attacker could possibly use this issue to sign sessions with stale keys...

USN-7534-1: Flask vulnerability

It was discovered that Flask incorrectly handled key rotation. An attacker could possibly use this issue to sign sessions with stale keys...

MAL-2025-4485 Malicious code in ideals-views (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b431166595255a46759ecab498e49f019b7714c5000ad452f14345bef36264ab Any computer that has this package installed or running should be considered...

MAL-2025-4562 Malicious code in html-report (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76dfd70352bf673a00030f6d35ad320bc633fad730881d95d897d878d7ce662b Any computer that has this package installed or running should be considered...

MAL-2025-4567 Malicious code in log5j-v2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 479704e8ae033e0588a24b1035307680aa38b28cacebb845b306ad8db35d0da9 Any computer that has this package installed or running should be considered...

MAL-2025-4438 Malicious code in iokit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0809d84edd6d3d9ba71ac05151f2564c41a8d94a6e8ee6b57d8237de7ba7720 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4430 Malicious code in apache-iotdb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dff74a911454d2bde3e33e6b60e2dbf0fd679cda9731532351e3766b912c3473 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4456 Malicious code in web3-evm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47f8566107060326567a6d66ac66f3c457f9a24142c7c3694200e07af63e9e27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4433 Malicious code in etherna (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 878da0ca7dbd6a63e9de7b962c0012e3ca24afca42be819c3b86af0600939fe2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4441 Malicious code in ml-preprocessing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 449fa18004b9f5016f86ea6f5c97358b4ca5263d4649325b946379ca51610f63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4443 Malicious code in mxc-jsbridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a080d6fa2cab7be94e152a7b621f7fd9d0ce62e7a726343e61bfbdf9e676e427 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4440 Malicious code in mexc-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7500b4df256dbb552286c7f37d34b2748ff1b5ef9f95263acf51f4806a5b2bda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4445 Malicious code in nsubstitute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77033df9455e373b7e21f347210206adb17103822278b3d6dacaa8b69423cc7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...