MAL-2025-48437 Malicious code in hyperion-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b9ccc060b3a05f5422ec317fc83c828522f43b1b0b2ce916d1c5d72bf082366 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48314 Malicious code in my-unique-package-here (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19289cab4482d99ed5e7a74abf6e380b1336b01b89502d23f3a63398b077f128 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2017-6516

Malware in sbrugna...

EUVD-2020-28628

Malware in sbrugna...

EUVD-2017-17155

Malware in sbrugna...

EUVD-2020-0101

Malware in sbrugna...

EUVD-2017-7488

Malware in sbrugna...

EUVD-2020-3849

Malware in sbrugna...

EUVD-2006-3116

Malware in sbrugna...

EUVD-2019-10141

Malware in sbrugna...

EUVD-2023-1813

Malicious code in bioql PyPI...

EUVD-2021-8682

Malicious code in bioql PyPI...

EUVD-2023-2729

Malicious code in bioql PyPI...

EUVD-2024-37706

Malicious code in bioql PyPI...

EUVD-2024-25942

Malicious code in bioql PyPI...

EUVD-2025-18218

Malicious code in bioql PyPI...

Malicious code in trendwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdcc4e365d2552163150eaf2fa138c0275533d653441752a4eb49ac5087100fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rsi-configuration-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9a9a3e53f5018108f5ce8abbccd7313ccac30e61c7985e5d7d90291c30299957 The OpenSSF Package Analysis project identified 'rsi-configuration-module' @ 1.1.2 npm as malicious. It is considered malicious because: - The...

Malicious code in across-indexer-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b8fef241ea15f212acce31cd8bcc9d561a7f8a55c8367d778cca91c189d8a3a7 The OpenSSF Package Analysis project identified 'across-indexer-monorepo' @ 7.1.1 npm as malicious. It is considered malicious because: - The...

CVE-2025-5962

A flaw was found in the Lightspeed history service. Insufficient access controls allow a local, unprivileged user to access and manipulate the chat history of another user on the same system. By abusing inter-process communication calls to the history service, an attacker can view, delete, or...