MAL-2025-47211 Malicious code in tailwind-configs-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eee3c791a92600ef66a7c4165e740bfeda8da8dad109a35e6db271d6fe07caf7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mysteryxyz228 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22682ceec435c59527a3d5aef373a154b9df5154463ebbe5620cc739d5c7e57d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in quick-navigation-interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 293f1ac2032d67eaf1bdca4962d876dc2f82271c474d5fbf4f3a6d2d50b71d63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47106 Malicious code in vite-plugin-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26f59edc4a049e09b7c58781c9ec1b0e28038561905195af89d655fedcd5b14a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47096 Malicious code in graphchain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f74a555cfba6dedc51a937d8cf8c843437538581dea703284d1e872317263f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-58435

Open OnDemand is an open-source HPC portal. Prior to versions 3.1.15 and 4.0.7, noVNC interactive applications did not correctly rotate the password when TurboVNC was higher than version 3.1.2. The likelihood of exploitation is low as a user would need to share their link to an active desktop...

Malicious code in @aledade-org/dsi (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9097b2177de180fece5d0c6bcc6c630315777466732e173c20ca8b22bdd24dc0 Any computer that has this package installed or running should be considered...

MAL-2025-47053 Malicious code in bundleliep (npm)

The package bundleliep was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 340754ac2fb58c38b60047b573870d36d4e8ffae96845c4da4f96b2ac8a43d91 Any computer that has this package installed or running should be considered fully compromise...

Malicious code in secured-ssh (npm)

The package secured-ssh was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2646cfd359028f95d25b02993d148c26f9a4f910b6ee2b382f6e5a38e30ca9a0 Any computer that has this package installed or running should be considered fully...

MAL-2025-47081 Malicious code in publicrepouixxe (npm)

The package publicrepouixxe was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d65248ca389c569426d0971808eab156c6812f4652e1a2a2c124f6e31cfb0da5 Any computer that has this package installed or running should be considered fully...

Malicious code in flashbot-sdk-eth (npm)

The package flashbot-sdk-eth was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52a62baf78e0196a1a1b9281fdbc9a6739bdac59ba497de64a461a107a173f97 Any computer that has this package installed or running should be considered fully...

MAL-2025-47072 Malicious code in issueprocessor (npm)

The package issueprocessor was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9ae6420ddf8d5bff4f5748172ab67f3347350fab80500157005588d47f931e7 Any computer that has this package installed or running should be considered fully...

Malicious code in frontend-eng-interview (npm)

The package frontend-eng-interview was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f09fffefe345d37955487a3e97f7811a5efdbd3449f11fbaac021e1d542b3793 Any computer that has this package installed or running should be considered full...

Malicious code in issueprocessor (npm)

The package issueprocessor was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9ae6420ddf8d5bff4f5748172ab67f3347350fab80500157005588d47f931e7 Any computer that has this package installed or running should be considered fully...

Malicious code in @self-sell/self-sell-amplitude-events (npm)

The package @self-sell/self-sell-amplitude-events was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae064f7137baf9c1292997ecd4204537d8011af89721c3d0878247049cd7a20f Any computer that has this package installed or running should be...

Malicious code in @liquid-web/guards (npm)

The package @liquid-web/guards was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff39fb3d64f126121b204db1daa7ccf8738a1cc5d70406735a1a9fab3e983691 Any computer that has this package installed or running should be considered fully...

Malicious code in @liquid-web/models (npm)

The package @liquid-web/models was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94c4dab8510635c784a7216857ef9d389224b338150feaf297bbb75eb824bdcf Any computer that has this package installed or running should be considered fully...

Akira Ransomware Group Utilizing SonicWall Devices for Initial Access

Latest update – September 18, 2025 On September 17, 2025, SonicWall disclosed a security breach affecting all SonicWall customers with MySonicWall.com cloud backups enabled. The firm detected suspicious activity targeting MySonicWall.com, through which threat actors were able to access backup...

Malicious code in @js-to-lua/handler-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecbb26f98b0d1520a3801861e0c434568d5ac1958606124e217a6e10eda3c436 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @js-to-lua/convert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 365d73a741a9c8513dad4db978ffd0658d1d583f07281a9a370a78062f36d6b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...