Malicious code in customprefix-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af67fc99b5f6993bf42c27c8c407c6bee3e97d0f412d03ab30533470b86339d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3568 Malicious code in expi-session (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0a80c852d048afe990e5644658ba661fb205972c1aa8f4b074ee3f9c7530d0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-27532

A vulnerability in the “Backup & Restore” functionality of the web application of ctrlX OS allows a remote authenticated lowprivileged attacker to access secret information via multiple crafted HTTP requests...

CVE-2025-27532

A vulnerability in the “Backup & Restore” functionality of the web application of ctrlX OS allows a remote authenticated lowprivileged attacker to access secret information via multiple crafted HTTP requests...

CVE-2025-27532

CVE-2025-27532 affects ctrlX OS, via the web application's Backup & Restore function. A remote authenticated (low-privileged) attacker can access secret information through multiple crafted HTTP requests. CVSS v3.1 vectors: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N (base 6.5). Technical root cause, aff...

CVE-2025-27532

A vulnerability in the “Backup & Restore” functionality of the web application of ctrlX OS allows a remote authenticated lowprivileged attacker to access secret information via multiple crafted HTTP requests...

Malicious code in internal-payroll-lib-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38b57b13614231552ff2a81bd698a53edcac5cfcc943ef879a6a2e1de08d7fed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redmins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbc5bc9b00f12ad85587941ac33154352652d85f6c05ec40ecdeb697b7dc20a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Linux-PAM authentication module, related to the insecure storage of confidential information, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Linux-PAM authentication module is related to the insecure storage of confidential information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Malicious code in @di-sdk/quickselect-wasm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb4f93b792159c059a742b5ea3d59a8038b8e1be1103e430086184a2f3ca3090 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in devel-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6982cb557467101f1484d126c8ff52717e15eb199a30a8089c7d099caf9eaa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @baywa-re-lusy/nsemea-address-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72abc75363d3a49d94650c8b66324e9d38506ea8e2724a1521a930555a996faa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3516 Malicious code in @baywa-re-lusy/nsemea-quote-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a970ecd3fffeb12875946cc0b4a9b9cbf2dd78228eda981cb2ad8316f22a2404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3532 Malicious code in nsemea-core-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dad870b6719a7ca56397739f03731e2e597c7008601ef058d93c6b312f6b4725 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsonspecific (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 429c7a9887c0f21c1ed1e71850a3cd3434fd578694e65fcdfdb60d7aaf896e13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3528 Malicious code in metadata-collector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d0c00e28320e5a836d89bb26152ff2b5c4989287285bb5071872ad3413821cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Federated One-Shot Learning with Data Privacy and Objective-Hiding

Privacy in federated learning is crucial, encompassing two key aspects: safeguarding the privacy of clients' data and maintaining the privacy of the federator's objective from the clients. While the first aspect has been extensively studied, the second has received much less attention. We present...

Malicious code in needlecast_mvd_ads_site_client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61ce65a4d7678f6d84073ddd091e870fc620022fdb560eeec0138823d6ac0b74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3500 Malicious code in needlecast_b9s_jewel_fyc_fe_client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0103a210a9570aca60dd6b0b9583710312fb9116674baaf17a9f6ae3084e462 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3491 Malicious code in gcp-alert-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08d19b607b4f352b166f0a4c5a1e6189aca16d98607043baba144dba19d9ff70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...