9680 matches found
Malicious code in wix-test-package (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1f32874e6b4601548e20068ae573d90851c71b83f79bf2505dc2795f55e5aba Any computer that has this package installed or running should be considered...
CVE-2025-2327
A flaw exists in FlashArray whereby the Key Encryption Key KEK is logged during key rotation when RDL is configured...
MAL-2025-5224 Malicious code in compound-design-tokens (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e796e34437556a1ebb4437a1047206b9f42ef8ee3426f6aacad4ac14b318c41c Any computer that has this package installed or running should be considered...
Malicious code in vite-logging-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efc641d41a5a062db57b5add42c3b87b5f0c2c434c694e7d512d62dce1dc7400 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in dev-filterjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c489283b73201bf0c4469fb76e21a9f5346d08f364c05c4938cc39030d20b38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5171 Malicious code in vite-logify (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e65a157421ab735107ae923596b8ab46c598935d30810b1e0ccf879388850ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5165 Malicious code in js-log-print (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32f7c2522ad9654a06381397d330bacf9a768718488543199f85362870ee4d9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5156 Malicious code in dojo.data.itemfilereadstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5248266d6f2bd26fd740923ccbb40e78dcc1ed93f59dfbaf27e9b51c212f6a67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5151 Malicious code in comp-base-photoupload (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5adac5ba125addda078885f62e39385b133893d4eb256e54e6761899c681a6d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5086 Malicious code in pysvelte (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0d2f08ecacd3e0b9d9edb2f45b372b814e20fc212140150b8b727be6cecb89d Any computer that has this package installed or running should be considered...
MAL-2025-5160 Malicious code in internal-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3d884505401eed92805f1ab05ea82f7cb8f024bd1bc32a575f2068814a90a69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5088 Malicious code in solana-web3-adapter (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12e75c393c8da1b623873b652c0e4024a25d635513e641c2c50d5899421160ec Any computer that has this package installed or running should be considered...
MAL-2025-5037 Malicious code in mafid-dev-fe (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36b547ef1882f646ffc42cf752909cf2d8483815568ff161e37189b3d3ca5d47 Any computer that has this package installed or running should be considered...
MAL-2025-5008 Malicious code in @openapi-platform/git-util (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96bf6ba53f72a3f15a38886bfb459f601a5de59cf964ebc169b368015d75e967 Any computer that has this package installed or running should be considered...
MAL-2025-5066 Malicious code in vscode-azurestaticwebapps (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6d86e1274287895eb9b8f392467eb59e1636c384bc7d0b77c9a1da853b02963 Any computer that has this package installed or running should be considered...
MAL-2025-5005 Malicious code in vscode-azurecontainerapps (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5ad54ec265645c2e7358384082a1b1f2385a1caa652b65c359b13681a211b30 Any computer that has this package installed or running should be considered...
MAL-2025-5168 Malicious code in readium-shared-js (npm)
Malicious preinstall script exfiltrates system info hostname, user, pwd, id to a remote server. Likely a malware. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c907ca12944ad675a60dbfd27a1680a1b2ebf1186512d0106676795741a558a Any computer that has this package...
CVE-2025-2327
A flaw exists in FlashArray whereby the Key Encryption Key KEK is logged during key rotation when RDL is configured...
CVE-2025-2327
CVE-2025-2327 affects Pure Storage FlashArray. A KEK is logged during key rotation when RDL is configured, potentially enabling information disclosure of KEKs. Documented impact is limited to what is stated; exploitation details are not provided in the supplied materials. Some connected sources n...
