CVE-2025-52287

OperaMasks SDK ELite Script Engine v0.5.0 was discovered to contain a deserialization vulnerability...

CVE-2025-52287

OperaMasks SDK ELite Script Engine v0.5.0 was discovered to contain a deserialization vulnerability...

@5ht/express (>=1.0.6, <=2.2.0), @audius/sdk (>=0.0.3-beta.1, <=7.1.1) +7 more potentially affected by CVE-2025-9287 via cipher-base (1.0.4)

cipher-base NPM version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on cipher-base and may be impacted: - @5ht/express =1.0.6, =0.0.3-beta.1, =6.0.4, =1.0.1, =1.5.2-beta.1, =1.0.0, =1.0.0, =0.2.0-beta.9, =0.2.0-beta.11 Source cves: CVE-2025-9287...

Malicious code in grok-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86e3c3ed43462c81e220a40fc8643c2c519f947bb781dff9a1d13de547b4d520 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview grok-sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in udg-uc-sdk-pds (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41417 Malicious code in udg-uc-sdk-pds (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in binance-sdk-ebate (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 43db9ff01b53b59066c74bb7571e281c1364444174851bd25c272e8fd7f3f503 Example of typosquatting package, with rather safe using localhost as exfiltration target. Package targets a typo in the Binance documentation:...

Malicious code in solana-spl-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis abc65f4de1b50248d903c79cb67ac016c8da464314e5830c70dbe0a1140503a9 The OpenSSF Package Analysis project identified 'solana-spl-sdk' @ 0.1.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in @identity-authn/authn-js-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6959 Malicious code in stellion-vidaxl-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in stellion-vidaxl-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in lootsie-sdk-ui-es5-inferno (npm)

The package lootsie-sdk-ui-es5-inferno was found to contain malicious code...

Malicious code in fa-sdk-web (npm)

The package fa-sdk-web was found to contain malicious code...

Malicious code in tzeos-sdk (npm)

The package tzeos-sdk was found to contain malicious code...

Malicious code in orderly-js-sdk-nextjs-template (npm)

The package orderly-js-sdk-nextjs-template was found to contain malicious code...

Malicious code in rts-sdk-api-nodejs (npm)

The package rts-sdk-api-nodejs was found to contain malicious code...

Malicious code in mind-sdk-web (npm)

The package mind-sdk-web was found to contain malicious code...

Malicious code in creators-sdk (npm)

The package creators-sdk was found to contain malicious code...

Malicious code in react-native-lip-sdk (npm)

The package react-native-lip-sdk was found to contain malicious code...