CVE-2025-10198

Sunshine for Windows, version v2025.122.141614, contains a DLL search-order hijacking vulnerability, allowing attackers to insert a malicious DLL in user-writeable PATH directories...

Uncontrolled Search Path Element

Overview Affected versions of this package are vulnerable to Uncontrolled Search Path Element via the DLL loading process. An attacker can execute arbitrary code by placing a malicious DLL in a user-writable directory that is included in the system PATH. Remediation Upgrade LizardByte/Sunshine to...

Sunshine 安全漏洞

Sunshine is an open source self-service game streaming host for Moonlight by LizardByte. A security vulnerability exists in Sunshine version v2025.122.141614, which stems from DLL search order hijacking and could lead to the insertion of a malicious DLL...

MAL-2025-191680 Malicious code in amzn-sagemaker-studio (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a557d275cca7627fa4d3e2c72f0fc9b78fc5ac70aa87a0ab586f1abf9f8777a6 Package exfiltrates the environment variables during the import --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaig...

MAL-2025-191765 Malicious code in import-license-checker (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c41ca4c8119fa20f7f5915b34de59f879b77fedf237cbbf5a69e46ddbeded428 Package exfiltrates content of .env files to a remote target --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

MAL-2025-30552 Malicious code in project-tue7f-hotel (npm)

The package project-tue7f-hotel was found to contain malicious code...

MAL-2025-25126 Malicious code in lemon-raspberry-yankee-bhebn (npm)

The package lemon-raspberry-yankee-bhebn was found to contain malicious code...

MAL-2025-30769 Malicious code in proto-ui-shell-test (npm)

The package proto-ui-shell-test was found to contain malicious code...

MAL-2025-21095 Malicious code in fxgcsmkrdalviuhz (npm)

The package fxgcsmkrdalviuhz was found to contain malicious code...

MAL-2025-17242 Malicious code in cocha-logger-services (npm)

The package cocha-logger-services was found to contain malicious code...

MAL-2025-19220 Malicious code in edit-modes (npm)

The package edit-modes was found to contain malicious code...

MAL-2025-20367 Malicious code in fern-albatross-yqa640-project (npm)

The package fern-albatross-yqa640-project was found to contain malicious code...

MAL-2025-14551 Malicious code in anonsurf (npm)

The package anonsurf was found to contain malicious code...

MAL-2025-19670 Malicious code in entanglement-stratosphere-titan-nucleosynthesis (npm)

The package entanglement-stratosphere-titan-nucleosynthesis was found to contain malicious code...

MAL-2025-25602 Malicious code in lorien (npm)

The package lorien was found to contain malicious code...

MAL-2025-26490 Malicious code in mist-jacket-lpu021-project (npm)

The package mist-jacket-lpu021-project was found to contain malicious code...

MAL-2025-29655 Malicious code in prism-5zjuf-caevv-harp-project (npm)

The package prism-5zjuf-caevv-harp-project was found to contain malicious code...

MAL-2025-18581 Malicious code in docusaurus-mantle-volcanology-entanglement (npm)

The package docusaurus-mantle-volcanology-entanglement was found to contain malicious code...

MAL-2025-15336 Malicious code in baiauto (npm)

The package baiauto was found to contain malicious code...

MAL-2025-18401 Malicious code in dewi-botok79-sukiwir (npm)

The package dewi-botok79-sukiwir was found to contain malicious code...