7964 matches found
MAL-2025-48064 Malicious code in redirect-l6qi9e (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea7c9759afb33de9be7fc7e051d5e7c5b3f74868b9887fec3b2e4d7b892d3fa2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48041 Malicious code in redirect-0g91q6 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb8a046d11d2d32600e11bc37ddbb705107cd33d2206e402b33572441677da95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in redirect-q4vs8m (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4164bf8a8a4ab59343241716ae2cbcdc9123ddadd837ef9a70d6578cf75b446b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48058 Malicious code in redirect-h0i672 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2b4efe272664ff868b1e9c5a05a87a2f41bf88048d2e4729407cf8932c4af18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in redirect-r3s2jv (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 584d7941602b2c0131393c7aee110a515c753647016285ece743e5c03fa9df9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48051 Malicious code in redirect-ci4ynt (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6192340fc5c992962663104944e345473999ca164f0e87b9edbc7ec0a6898e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in qr-code-demo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6749d8eadfe0585d427c6322c10d15c81e3e58171b08a31de2a4abbaddfb9264 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48033 Malicious code in nextjs-edge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e760ae97f3946b05b183b7e2d558f757bb3bf66afe4199dc5e2d3b54aa0b5e3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in nextjs-edge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e760ae97f3946b05b183b7e2d558f757bb3bf66afe4199dc5e2d3b54aa0b5e3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48026 Malicious code in concurrent-ruby (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a9a44087853b6fa03aa9a4f09e51ff827a6d90b6fe4da7c38cc6ef2764ad99d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-34252
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. This vulnerability has been reassigned as CVE-2017-20203 https://vulners.com/cve/CVE-2017-20203 to have the year of the CVE correspond to the year of public disclosure...
EUVD-2025-32881
NetSarang Xmanager Enterprise 5.0 Build 1232, Xmanager 5.0 Build 1045, Xshell 5.0 Build 1322, Xftp 5.0 Build 1218, and Xlpd 5.0 Build 1220 contain a malicious nssock2.dll that implements a multi-stage, DNS-based backdoor. The dormant library contacts a C2 DNS server via a specially crafted TXT...
BatShadow Group Uses New Go-Based 'Vampire Bot' Malware to Hunt Job Seekers
A Vietnamese threat actor named BatShadow has been attributed to a new campaign that leverages social engineering tactics to deceive job seekers and digital marketing professionals to deliver a previously undocumented malware called Vampire Bot. "The attackers pose as recruiters, distributing...
CVE-2025-61687
Flowise is a drag & drop user interface to build a customized large language model flow. A file upload vulnerability in version 3.0.7 of FlowiseAI allows authenticated users to upload arbitrary files without proper validation. This enables attackers to persistently store malicious Node.js web...
XWorm 6.0 Returns with 35+ Plugins and Enhanced Data Theft Capabilities
Cybersecurity researchers have charted the evolution of XWorm malware, turning it into a versatile tool for supporting a wide range of malicious actions on compromised hosts. "XWorm's modular design is built around a core client and an array of specialized components known as plugins," Trellix...
XWorm 6.0 Returns with 35+ Plugins and Enhanced Data Theft Capabilities
Cybersecurity researchers have charted the evolution of XWorm malware, turning it into a versatile tool for supporting a wide range of malicious actions on compromised hosts. "XWorm's modular design is built around a core client and an array of specialized components known as plugins," Trellix...
Microsoft Links Storm-1175 to GoAnywhere Exploit Deploying Medusa Ransomware
Microsoft on Monday attributed a threat actor it tracks as Storm-1175 to the exploitation of a critical security flaw in Fortra GoAnywhere software to facilitate the deployment of Medusa ransomware. The vulnerability is CVE-2025-10035 CVSS score: 10.0, a critical deserialization bug that could...
Malicious code in res-notification (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef24fa6bd07739f45e7e31a196535dc42562533848a3b3dcd6b7bc98b16ff4dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...