Malicious code in @morphodao/morpho-core-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb9bd67a4d3649cd1f46a3e877bdffb2ed879805fe1aa9817036dd56b887f414 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47314 Malicious code in gatepass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61c2e9c4b5cbc80a41fd1b6bc9814d7354bc1aa20902ff0fe61a874828d171e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47297 Malicious code in alert-codestreamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b406db84de56694d487b81b4123aafb61e290fea6b7921f521d94cd1843c6543 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oci-plugin-compliance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 762cb43037a71931178ccf3452552b84331b30ada3f192f5d979eed5b372da3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47333 Malicious code in oci-console-plugin-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19ce011b024c9c3dcf78578cbf559de94a96364525ace53ce28457dba2053bf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mcp-knowledge-base (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4724282166039be3118847ca134f1f7cabc4997246050c1b2a195ad521ed995 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in tg-redbird (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 381bdac7467e1d835aecf58e3cfebc472a5db3afa8109ad93f30ff7f6e020e09 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47336 Malicious code in oradm-to-gql (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0ac4253913c37f56a9ee729dd49820eda47882515ce23f981c61b39f249ecf4 Any computer that has this package installed or running should be considered fully compromised. All...

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

podman: Podman kube play command may overwrite host files

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the targ...

CVE-2025-59363

In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps API v2 even though this secret should only be returned when an App is first created,...

MAL-2025-47210 Malicious code in swc-plugin-component-annotate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65e72154327975b96053186a0016efcacea667730e163b10f507b40b94254047 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47187 Malicious code in koa2-swagger-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31fd12270f2d2a5b53bfaf3aabcbae8d26a7eec21613c28e4673369a33025ba5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47131 Malicious code in @ctrl/deluge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d92c8c0ce4fcd72693ec79d2f5d112099c3e5d23e214a06327498cfa5b655fc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nativescript-community/ui-collectionview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 337737895f40e9bb6a3ceade1add7134f43ef138029b408eb08597176f412b34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nativescript-community/ui-pager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afb9d30cb2322dc8acbeb63463faf85b0a58a8d761ce7bab042f690f894830f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nativescript-community/arraybuffers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbd4477b4250e2af1b9a5fdcd76d234900437c12290d3cc79ec173d8f0fbc862 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nativescript-community/text (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70e308e7da4975ddec5cf39601e96232abc461d9544cc82745a13e8efd7b4200 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47151 Malicious code in @nativescript-community/text (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70e308e7da4975ddec5cf39601e96232abc461d9544cc82745a13e8efd7b4200 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47167 Malicious code in @nstudio/web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c10ca009d851af8a5cd991038674696dcba73033bd87678ae2187dde082e8e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...