Malicious code in redirect-9iak88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b98d46b56f1f5943ab4986d31e6ce7664eebd84d3a0f8e731f4bb9fd267ecd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48198 Malicious code in redirect-nq70u6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 099d83c25e6a8662b90ff95da62e95d6118eb1d71b1ed785e186f69054ae7f66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @testcarrot/supply1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 517d985985f415a1c4c91f10bdfc1757c72f7331c1f00d61ef96d902603783e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48101 Malicious code in @testcarrot/supply6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1879de03e36cf280adcff93d8fbfe8537bb68de7e372b70c0e6b80adbdfe21bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Are Voters Willing to Collectively Secure Elections? Unraveling a Practical Blockchain Voting System

Ensuring ballot secrecy is critical for fair and trustworthy electronic voting systems, yet achieving strong secrecy guarantees in decentralized, large-scale elections remains challenging. This paper proposes the concept of collectively secure voting, in which voters themselves can opt in as secr...

PT-2025-41496

Name of the Vulnerable Software and Affected Versions Allstar versions prior to 4.5 Description Allstar is a GitHub App used for setting and enforcing security policies. A flaw exists in the Reviewbot component where inbound webhook requests were validated against a hard-coded, shared secret. Thi...

CVE-2025-59303

HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with create/update permissions. This can result in obtaining an ingress token secret as a response. The fixed versions of HAProxy Enterprise Kubernetes Ingress...

MAL-2025-48056 Malicious code in redirect-g7gn31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41449301c25a672dfe856f930f2db780d4971f16a0b88378cb93d78369a20e73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-7vw41m (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e2ff7b41b210d052c6bf0d4bbf06bacc41931093d686c3b97bd56cc2034c860 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48071 Malicious code in redirect-qrah57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db917c85b5931f7072dbd29e85df939cac604bc86e6fa7800a29defb2b716c00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-jr2idt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a59d3454870503f71877a0351e21ead72319924da7d2f0978c7e815a2af6f995 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48076 Malicious code in redirect-v74zee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00eb82dc8fa348e42a4e1260cd210adb1e29238ba2b0d7035b5e9257cb2038b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-aw9itj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63aaf18f4006c8f27a7b0418692132ad2c600f3562eb6105c133cc52f91c0d40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in migration-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6df2c870c5d08b1672285eb7a008a6c1f960920bf35587f217d96c7f08051a14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48083 Malicious code in swiftiegpt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18847d1a8872346fbceb2ef41566692d5a48061194a4dc47c48baca4f1bfb94d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rails-dom-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c71a0792e9dc0f14b43ce18d9e3c77d91946237916717b87a53222fb8fec287a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48039 Malicious code in rails-dom-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c71a0792e9dc0f14b43ce18d9e3c77d91946237916717b87a53222fb8fec287a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in storefront-search-as-you-type (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0e0258430f6ebc7401b9e28828d8433806e188a230f2a687fa206651d72978c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48027 Malicious code in erubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9add1663a518f1688c3a014e351a0cba0fafb34a4e5270c74aa5102443fd88e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48015 Malicious code in cross-session (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46f6bdb0e17b0d49c9c3b316cc02bf5fb1964d956cd9a541c6fd2edd0eb5c551 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...