Malicious code in automerge-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1da244640f30c94a5a2ad3c103f42716ec4d5e1137c311309f817b111ecf8962 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in adidas-github-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28226fc9d38372cbe92f7985bb3e187f7c0b05278acac32be1d2bbfaf7cda2e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-189 Malicious code in flutter_inappwebview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 394e259ceac6eb2a72e92a5882933facc39e1ad19e0bf1a6b908a92ce115a28f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-249 Malicious code in storytel.github.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eac8a26871ff9acbc3aae4118bf1e4716b305b8547d5fcd1f650c7fd5580b745 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kubeflow-pipelines (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b48fb3f0a2da611129fdadc65a4bb98ea67f4427bf3f7707de95c4b80ccb8eb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-235 Malicious code in pyroscope-oss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78530d6378099081103c13a5d340a9c8562d2c041085a8c20893adb93bdd115d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-195 Malicious code in imports_exports (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea5938b670954f2baac5b5cea2bc04aa6e747a8ddbd666cfc4a1a9188fc4016d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ssv-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d441396521f48556524fd4855d512807ec7548fc10a968ecc786535ee98dac6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-158 Malicious code in anotherexternal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8048f8389fecd3d45d156d4fbd5dbbff5ece757ce08de730f4546368cad782b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-168 Malicious code in borsh-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51f002385b3c94048b1a161d8afd15fab61c24c5e54a4a23d9020a22313bd3f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-247 Malicious code in ssv-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d441396521f48556524fd4855d512807ec7548fc10a968ecc786535ee98dac6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tree-sitter-pkl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5692ca694e95779acafae807b9a6cd3b419e1b284ff21a64c2b91025f525de06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-153 Malicious code in ad-shield-essential-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 204851191eeff7f39b152f6eea9aadd2303a89c305e1ea65c73ac3c54c96a25f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-154 Malicious code in ad-shield-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65332410795abdd16c79e5d2778ed52c4dc3725715f2c4624d21e1a5f4ca3b92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-171 Malicious code in chrome-api-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 945a0a50710064ba2531f6b43681d86f70f1abe054cbb593386e63f921369750 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-245 Malicious code in sparo-output-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 815ab9da2f5926d787c29ea7fe61f713ec6679c627ef6602931de859c7cc24ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-129 Malicious code in jssdk-infrastructure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80c132d5e9d9ea8c65f7c252909ff66d20a611adce2c58734305e4fe06254319 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in venmo-ui (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c56cfa4b6e6b329cc9502a5eeea242d13fd03e156392465657d5254b441ecfe Any computer that has this package install...

MAL-2025-126 Malicious code in gouraud-lighting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfc362cce48bdb5f578a8b148d9c1883aa7b66c4613c09379816e9ab15ca89e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-46665

An insertion of sensitive information into sent data vulnerability CWE-201 in FortiOS 7.6.0, 7.4.0 through 7.4.4 may allow an attacker in a man-in-the-middle position to retrieve the RADIUS accounting server shared secret via intercepting accounting-requests...