Malicious code in storefront-search-as-you-type (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0e0258430f6ebc7401b9e28828d8433806e188a230f2a687fa206651d72978c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48015 Malicious code in cross-session (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46f6bdb0e17b0d49c9c3b316cc02bf5fb1964d956cd9a541c6fd2edd0eb5c551 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-41287

Name of the Vulnerable Software and Affected Versions HAProxy Kubernetes Ingress Controller versions prior to 3.1.13 HAProxy Enterprise Kubernetes Ingress Controller versions prior to 3.0.16-ee1 HAProxy Enterprise Kubernetes Ingress Controller versions prior to 1.11.13-ee1 HAProxy Enterprise...

CVE-2025-59303

HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with create/update permissions. This can result in obtaining an ingress token secret as a response. The fixed versions of HAProxy Enterprise Kubernetes Ingress...

EUVD-2025-33296

HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with create/update permissions. This can result in obtaining an ingress token secret as a response. The fixed versions of HAProxy Enterprise Kubernetes Ingress...

CVE-2025-59303

HAProxy Kubernetes Ingress Controller (before 3.1.13) is vulnerable when the config-snippets feature flag is enabled: it can accept user-provided config snippets from users with create/update permissions, potentially leaking an ingress token secret. Fixed versions are HAProxy Kubernetes Ingress C...

Malicious code in 1unitest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46dbb904ebb44cb658e404afc6f818343f418ddeae078ea07ea9071f4f55c69d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47987 Malicious code in apijsuni1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc739fcfc81f8d8dc67032dc5092aaa2e25b397bc838baf43d99e10dff110057 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48008 Malicious code in uniswappols (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05334370031b1fdd7e589e3632bb55b0f0b8514bcdb712b63eba49eef3c86e59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cli-color-ext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00e6c2e1e930bfa55419cca8bfee2d2419cc6f91e0f9359a11e9e520abb28393 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47969 Malicious code in @pumpswap-sdk4/metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00e7cebe75e2b9e547a927e980ce03c494aa875762beaba4541eb71ef7222566 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47975 Malicious code in consumerweb-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eb6a4d25e1e5232ce079c43523de3b71572bb90389aabf0dbebd38837fb89f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in consumerweb-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eb6a4d25e1e5232ce079c43523de3b71572bb90389aabf0dbebd38837fb89f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47961 Malicious code in raecahaartas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f607e854df80ada9b6aa0de8cae2e2893f1520b60bfaed0ba5ccee7aeb607b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rechxartas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5cb88de7667d98496b7bf14bd3ced3b4e7f51a418eeab8e389ba0c15fbc9745 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in raechaartas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9356d7106780c664ef4cc428fb0f72fc1165f196d819bb3a20fc0a86d648a0b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47948 Malicious code in orvllaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c14485f093ca8dc9ed7f8edb235eac174df0118b3960643c3c0c8ddc8d2bf7aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in orvlla (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56ea7ddcdbe3dab6e4c993804c781fc7cc5d3b48ffc11fea15a0adbee62d9296 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solarpeng09 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6045df4a0e5e5868d4c68eb60bd906129c7659cae8c241c253675bcc7d56bd9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solarpeng_node_eval4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eeb42c5e6381f2debe4e94826c8e1a29e0b0d730abf69e5ca521d768cde1ea04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...