Malicious code in rest-icon-orchestrator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21efc3fdff6697baee6fe3ec8b62837d3ee9fa549ec7fc39595559ab5691f3fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4284 Malicious code in react-native-scrollpageviewtest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcee80fff21305590dcf04ace763231bdd81fcc2ef72bf8492ed79a60a17cd3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4170 Malicious code in cryptopay-button (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcedc265cd35c85d1f001fe8dc2c4da5d52e5a4b473c125b7883a67e797ff4f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4290 Malicious code in vue-vibe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab8de1f63578f65874a6d949bddf997d76bf6e1c2a0fcfae34f696368003df5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pdfgenei (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a635759afaf7991ad303d483dd330e7a814d936a1b14116346cdc8b42d52194 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2014-5181

Directory traversal vulnerability in lastfm-proxy.php in the Last.fm Rotation lastfm-rotation plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the snode parameter...

MAL-2025-4132 Malicious code in solsniperbyagave (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22d6ef63513cb6ba90c7d26166b050ff064c8ca07745dff68400cd9f0bf3b112 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lol-ninegacha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 332626b1c4ee5d04b9cf7d47646efa1f37df2e108866df823ccf410a9026d869 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4103 Malicious code in migrate-lol-account (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88dbcb391cecbefa568dbffa3d4296d9fa09eddb14625e899283b70920acaea4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4098 Malicious code in lol-rp-raffle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00025362df4c28b05b43b7f7d4ef05b04b5ca52287e9d1df8b20426c4d68d0a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4099 Malicious code in lolnews (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7215858bd520348bd1b650a0c7bfebb41fa47b6ca3c3fa269f18dbcd0b13848 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4072 Malicious code in core_plugin_route_timeouts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d78de07f17ce59423078e4f2157d3bbc7034ea6b759f66a2de1858baba4da2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4137 Malicious code in ultimatepower (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79a2b1d92e7a7944260e21d39f2b6724e8903106957b245238be128a625245b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4071 Malicious code in core_plugin_b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b017d4d66c75e5abd747ac42ebec3611c23c459b9d627c55156dffafb700258a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4065 Malicious code in cdn-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d46d020b8f0a6ff1bcbb09ee63d0083f060a65c38e6f1d6518e860750e837544 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4097 Malicious code in lol-project-2017 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 713140b3d10253eb856068004fa4bc07dfbc38a48b4f0a2a706fe7c242284553 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4074 Malicious code in csat-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6108820bc94bf57a91a424d61c4704c69a86f807ea9f4993a63255a993ee8a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lol-project-2017 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 713140b3d10253eb856068004fa4bc07dfbc38a48b4f0a2a706fe7c242284553 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4082 Malicious code in grammy-menu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 877553f9f9497ed8ae9c7207031e84315c467837dceb8b2d9b46eb2d5cc7a6ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4083 Malicious code in grammy-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0ed36c0c9d339418b7fb4e6d6a1935303e10cf8837050934a3d6d61f0a1b6f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...