MAL-2025-4614 Malicious code in rosetta-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 223577bf445eef54d28cca3d3d2015b497b5c23838c938f2a48411440b05f614 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4637 Malicious code in @majidalfuttaim/maf-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2330446b43c4350ffd756e057399577c16b5b7b20767a3a71fc73b20664fe62 Any computer that has this package installed or running should be considered...

MAL-2025-4608 Malicious code in @pentestleg/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12690fd1c593ee20e534b6c4d32dabdc2e39c773c7a78d9f64ec44b457645f5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: IBM Maximo Application Suite Predict Component : Flask is a web server gateway interface (WSGI) web application framework. In Flask 3.1.0, the way fallback key configuration was handled resulted in the last fallback key being used.

Summary Security Bulletin: IBM Maximo Application Suite Predict Component Component uses Flask is a web server gateway interface WSGI web application framework. In Flask 3.1.0.This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-4727...

MAL-2025-4592 Malicious code in @bugbounty208/sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3880eb4b27327dd3c26a3000c1d1f720ec589fc10d0d490bc532874c0c1c9ed2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4595 Malicious code in express-authgen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b288b33e1c8cf62fa86cc3a42c139bde6cc4674aec2cc0327ca503b64daf2a4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4594 Malicious code in blesx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e5b8fa8d08e2e5e4608dc0698b4e0e20ce49e1c93bfdbb4b37334cda83f5f6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4600 Malicious code in odin-security1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d86b20d8160d57b785f74b9bba211706cb3432a2060da273c1b876e3d2cfa39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4593 Malicious code in @mpsemea/fspay-smartpay-logging-web-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 743df569bb531a07b7075f6ce9780c5ce5d7f6276d932c99d1374f31d5ec042c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4587 Malicious code in ethereum-smart-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e10c205ca79402ee59b57b5e2a0475562ba75988af429715c808ad690e6fa49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4586 Malicious code in env-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 105ae811c2409aa9875948339815f7f362e64e01e0c82342286fba8de426878f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4588 Malicious code in pancake_uniswap_validators_utils_snipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 791d7ac8f5692ffcb4db92ed0986a9f6c422640fbbe19c1522dbbc0f813aaeb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4528 Malicious code in gitdependencyresource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83fef2647750041b69c08748c2113e2bacb9b4cb630d247951daa865f4ef7743 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4535 Malicious code in wallet-connector-rce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7da34a4136664074d4841726a150a99a3bc33e88c131fc32766950633e0f9558 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4530 Malicious code in ledger-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc743e9a6f102ba2318706d8d0396d38233132640f0d11cffb7388e14bb6537b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4490 Malicious code in mirror-chat-ctf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05a80d5c1613fb9a0db9f6d2b95f12da296ef2ac3f58be607c601a87c73d840e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4464 Malicious code in airdrop-interface-markets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 159a4dce9883ef2c1edd948d35a42feea7e9a7c3ac873bbc1a28e54f9b482004 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4475 Malicious code in crypto-base-class-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6367d8d4ea69716ade6df0bdc1288d33b7d0028c1e4416d2dc3f587f853cfe5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nayan-apis-servers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a500808f6303d2da4576b49076cf7171323167850ff6890ee9dcb7f801786489 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4492 Malicious code in nayan-apis-servers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a500808f6303d2da4576b49076cf7171323167850ff6890ee9dcb7f801786489 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...