CVE-2025-2241

A flaw was found in Hive, a component of Multicluster Engine MCE and Advanced Cluster Management ACM. This vulnerability causes VCenter credentials to be exposed in the ClusterProvision object after provisioning a VSphere cluster. Users with read access to ClusterProvision objects can extract...

Malicious code in zhdex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26fbd05a0708bfd20a0abd31a447aec6da2d03a0775abd736c4ab2e1f09788ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in you-test-test-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13a9b3aed0c3abe33ee85f5fc9b7c0dd8020835cb6f1c038f1f6dd6822561a3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2480 Malicious code in you-test-vue6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fd4454397046cf8aeef6561fc90938310a1172cee3cbb872c07bbddcbe909ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2478 Malicious code in you-test-test-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13a9b3aed0c3abe33ee85f5fc9b7c0dd8020835cb6f1c038f1f6dd6822561a3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2470 Malicious code in pdftodoc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14520ac90732a33be79f604147753e91fe812ad121b9fffa4b573a6e6793ec50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in malwaretesting2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 992d4e35601291d8af779953d2f285061a62412b41ee8a799245b99892ce7efc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2467 Malicious code in malwaretesting2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 992d4e35601291d8af779953d2f285061a62412b41ee8a799245b99892ce7efc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2455 Malicious code in attacktree (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7da476a4c6326fba7be03913b209024e9c2bb6722dc57b4f960812616dc161f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2473 Malicious code in shorterapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f5eb942dbb6cb91bfe5e28567482dbc8642287b5e070aa027795d9bc79949d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in career-craft (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5d3af1a920beb4a5ab94433e38b127dc8105f4ca7e527ad53b5a80b0e992111 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2476 Malicious code in usedin1calculatedmember (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eadfffc66c23d984d3c0ee6fb0e8f591917bf5a155438c4e1e86bb4211db3da4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2477 Malicious code in usedin1calculatedmember.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed860b89d268513c84a79e07ffa072fcfbdf3eccee1b2506900c48c49abd84dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2463 Malicious code in ear-gui-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2627c1c30ce11ca3ef62b95cc12a6777f5fba58b16815c1ec7b4f8c38af0ee67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2468 Malicious code in node-llama-cpp-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d27e255d94f63ec3b548fa8d9ba50b8565a5b534b5d4ea838571ef729ddec60d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2454 Malicious code in antilles-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56d8dfc3b79fa6493ab5f345589e54b0de205521c295c640001fda619a215e99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in contaxy-webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e369d55f0561aa0c1af981aea283045a266800715c8ecfdcd178cece2cc853b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in panmirror (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3385cde99d98bc2917be74ea78c8302eb62e61dfb90d33d71be4a9b71b661e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @financials/using-dep-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57594d4888118b288663b3c166cd3cefb4f30e8aebc4e4bed2f92a51945a33bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2452 Malicious code in @financials/ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4e926cb5ead89764d2bf06ee99599588691f94bf8e2bc5976cb73d5aa722bf2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...