Malicious code in @nativescript-community/text (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70e308e7da4975ddec5cf39601e96232abc461d9544cc82745a13e8efd7b4200 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47151 Malicious code in @nativescript-community/text (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70e308e7da4975ddec5cf39601e96232abc461d9544cc82745a13e8efd7b4200 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47167 Malicious code in @nstudio/web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c10ca009d851af8a5cd991038674696dcba73033bd87678ae2187dde082e8e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in copperflame (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa4bc59373e996ffbc13a99c552e80699ccbd913beff4bebb211e57f56093915 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47177 Malicious code in err-notification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0eafe58cdd2171d0209fa3bbc4150f186232cd35115cfb537dde7dd1842e98e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in texttweak-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 366586b816182bcde0c96a7b2ad0ba3388a1fb49629c3690d7d3c9e41f7b1dae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47205 Malicious code in str-validator-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbae0fa7ec3f4325516d97436685965bc1ff6dddaf218710407f697497c579a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in basic-validator-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a065e2ce3dcaa4245e9bd8873e7878385dbe7a3fe9aa7276ae5ac89686209889 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47174 Malicious code in basic-pump-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc10b9f2bba8789f982dedfa26ff72ba0c4149b11d522b1d60523fac65c58419 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47186 Malicious code in jsonstylizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 085d3b8a0491210bdcc534a63cbf29b4342b14a727d38e4bea0c8fae2f747dd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47185 Malicious code in jnscript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 061c827dba1805eb29a15f2ecb9cc870bbc52edca26282a7a42d392de950ef42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @huobi-lib/vulcan-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19abe7ab9afcd189bbbd5061add8629d1f576b8dae3944cc7974b7581ffbd570 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47178 Malicious code in eslints-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b662ef08a1f7e1997586aa84a90068921137be8ec4c4c82df2ba5c5318ad3202 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47179 Malicious code in eth-node-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43e3bae1d6be9bca527622368d2a291d97b40692ce8996525eefb78917c7e0de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47211 Malicious code in tailwind-configs-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eee3c791a92600ef66a7c4165e740bfeda8da8dad109a35e6db271d6fe07caf7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mysteryxyz228 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22682ceec435c59527a3d5aef373a154b9df5154463ebbe5620cc739d5c7e57d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in quick-navigation-interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 293f1ac2032d67eaf1bdca4962d876dc2f82271c474d5fbf4f3a6d2d50b71d63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47106 Malicious code in vite-plugin-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26f59edc4a049e09b7c58781c9ec1b0e28038561905195af89d655fedcd5b14a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47096 Malicious code in graphchain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f74a555cfba6dedc51a937d8cf8c843437538581dea703284d1e872317263f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-58435

Open OnDemand is an open-source HPC portal. Prior to versions 3.1.15 and 4.0.7, noVNC interactive applications did not correctly rotate the password when TurboVNC was higher than version 3.1.2. The likelihood of exploitation is low as a user would need to share their link to an active desktop...