MAL-2025-3095 Malicious code in debug11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 494ce30e156e31a77830da340b86accd5cfe85da1c6bbbe4073277d4980b3009 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3116 Malicious code in rif-token-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05165c539111a84ce983abfe2dbe4cadf7b601ad72a0676be43e8c101e5fc752 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3113 Malicious code in phonepe-payment-capacitor-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c02a4bb7c5999768baf3318427f8aaffad151f7838f8bfdfee9ad952a24db492 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3124 Malicious code in twc-app-example-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 274ea59bea6b31be4c1b08dce0b142ccdff5b3d9541c5edecd6cab49226d93cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in twc-app-example-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 274ea59bea6b31be4c1b08dce0b142ccdff5b3d9541c5edecd6cab49226d93cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3094 Malicious code in com.henryhoffman.unlockprotocol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0b9fe935663d6cf238511872ce9dec97a8af571599942b2005de6e3579aa08b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3104 Malicious code in invoicetemplate-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0040946fd67ce8ddd6e93a9a31d2bdfc1ba57b40874f62c2b033f3d2be5a5888 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3103 Malicious code in invoicesettings-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3de3a7f2639414d0e6ff7a0993317695868f6538efb3c2e2e32fae55dac833c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hide-console-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 553d9f1d98ecb2b448f09091adba1ab0cdce9e4f07391a50fc002ba74669645a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3111 Malicious code in nva-process-inf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d654f39c1766e74a8a2950ae8ceb43686999ec02923d6454655c6596bd87354b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3110 Malicious code in nva-pc-inf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77dc01946382a6707bf750f1631eec9206151219b3213c532eeb938acc7c99ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-14795

Name of the Vulnerable Software and Affected Versions Gladinet CentreStack versions prior to 16.4.10315.56368 Gladinet Triofox versions prior to 16.4.10317.56372 Description Gladinet CentreStack and Triofox are affected by a deserialization vulnerability due to the use of a hardcoded machineKey i...

MAL-2025-3041 Malicious code in @hongfangze/derive (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26e43acbc8a628be253e93356cf6e0c1d304680b286519fdf143088ae0136e44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @hongfangze/three-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce552b8f15a3e5d94a92d9b3cb42e8cfe7f681bf36a3018cd02afd29436900d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3056 Malicious code in @hongfangze/three-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce552b8f15a3e5d94a92d9b3cb42e8cfe7f681bf36a3018cd02afd29436900d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3046 Malicious code in @hongfangze/mq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32be147fdc6ce87ca5422a92c79a9d1fe7e891ec5e55768e935355ede80f4e4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3050 Malicious code in @hongfangze/pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e73a080830e05ba03056d448f8fc7711301bb1c7c5e13797c1f192b7373be10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3045 Malicious code in @hongfangze/http-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 329e7512b9a53734a0d6d5318623dd66ecc2b6294c46e8418bd5d888ad31eb69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @hongfangze/simple-resource-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71bfdfddee527d454ff8513b29947095d5b34bc2e3d5b67cd0df26f38da76adf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3049 Malicious code in @hongfangze/office (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25f57ae31d0133a71e4274c381dcefb8e00468c17cd0a7df89a9a4bbae15baa4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...