CVE-2025-2327 FlashArray KEK Logging Vulnerability

A flaw exists in FlashArray whereby the Key Encryption Key KEK is logged during key rotation when RDL is configured...

Malicious code in chii-aungpao (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d137cd4cbdcb873723e6209b260d08470543b42cffe8dcd42c3b31106ce78012 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4995 Malicious code in chii-aungpao (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d137cd4cbdcb873723e6209b260d08470543b42cffe8dcd42c3b31106ce78012 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4993 Malicious code in boost-chii (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac33b7f9bd3634fd513bc6cdf809460ef22919a7841d779fe3cfca4c733874c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4997 Malicious code in raydium-sdk-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15f2bf4f7d00a9a160e45525fc4b09ccf0957db423f83602f0e2aa72dde0ff2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4998 Malicious code in testhelloworldfromitaly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c414227e2d098e8bc9abd91dfb8037346251a3160b8f88fc11318f5063c7d79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4981 Malicious code in vscode-spring-initializr (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eade5f13d9d6cf7678dfdf2bac67cfc29db071d6d1682cc6b3aadeac7561e30f Any computer that has this package installed or running should be considered...

Pure Storage FlashArray 安全漏洞

Pure Storage FlashArray is an all QLC flash storage array from Pure Storage, Inc. A security vulnerability exists in Pure Storage FlashArray that originates from logging key encryption keys during key rotation, which could lead to information disclosure...

PT-2025-25571 · Pure Storage · Pure Storage Flasharray

Name of the Vulnerable Software and Affected Versions: Pure Storage FlashArray affected versions not specified Description: A flaw exists in FlashArray whereby the Key Encryption Key KEK is logged during key rotation when RDL is configured. Recommendations: At the moment, there is no information...

Malicious code in wasm-wasi-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 320ad464f0780881fe134c1e9990c2e1a180a2ab4b6b103e26439d8861709021 Any computer that has this package installed or running should be considered...

MAL-2025-4977 Malicious code in neuroglancer-rspack-project-source (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd14a9249e5b9f2e191e4d5577ce6e20a78b7a315f3b1d026f8e4af67f8afd8c Any computer that has this package installed or running should be considered...

MAL-2025-4975 Malicious code in arc-offsec-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10c818d61d5a433e8603351eaeaa1329d8a7365d5c6b8497143cf7c8e5c1f9f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in symboltotypenode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc2ee98d2f9315f44147559cccb724db19ec94c7d96292e89e16f379f8ca81bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4989 Malicious code in symboltotypenode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc2ee98d2f9315f44147559cccb724db19ec94c7d96292e89e16f379f8ca81bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4970 Malicious code in com.google.play.appupdate (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3947330cc41713516ed88cb21b4ee7eb95b9b59d534811223a3bb3d9b696b24 Any computer that has this package installed or running should be considered...

MAL-2025-4969 Malicious code in justsupport (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0717c9c1537a4bbe94634a39a76f580fad3206f21e5b3ec817f61c9384f442ba Any computer that has this package installed or running should be considered...

MAL-2025-4966 Malicious code in zxdb (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b6e6fbdc6289a7a4946e72303aaeb98c9b837470df312ade4e634a7fa81fa52 Any computer that has this package installed or running should be considered...

Malicious code in z0ra-helper (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ae1a970257032672e791f973b2735c2296a92f9af170ed32e74cb9145f113e6 Any computer that has this package installed or running should be considered...

MAL-2025-4990 Malicious code in utils-peak (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46c5cca2d9f2fbddb5143a1c1e4c6d607239cb78dffb27b196b3fa625c02926c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4959 Malicious code in zora-exploit-payload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a09d84c94c165c768d88481e00efa77860f1237a66dc441e253dd480f1e476a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...