MAL-2025-30763 Malicious code in proteomics-spawn-upgrade-parallax (npm)

The package proteomics-spawn-upgrade-parallax was found to contain malicious code...

MAL-2025-17612 Malicious code in cosmicray-commitlint-rollup-spawn (npm)

The package cosmicray-commitlint-rollup-spawn was found to contain malicious code...

MAL-2025-26224 Malicious code in metabolomics-configstore-xenos-spawn (npm)

The package metabolomics-configstore-xenos-spawn was found to contain malicious code...

MAL-2025-14591 Malicious code in antd-lint-loopback-spawn (npm)

The package antd-lint-loopback-spawn was found to contain malicious code...

Malicious code in tectonic-ursa-sequelize-spawn (npm)

The package tectonic-ursa-sequelize-spawn was found to contain malicious code...

Malicious code in spawn-spinner-stop-callisto (npm)

The package spawn-spinner-stop-callisto was found to contain malicious code...

Malicious code in spawn-vortex-development-epimetheus (npm)

The package spawn-vortex-development-epimetheus was found to contain malicious code...

Malicious code in spawn-ganymede-arcturus-dione (npm)

The package spawn-ganymede-arcturus-dione was found to contain malicious code...

Malicious code in server-mini-css-extract-plugin-orogeny-spawn (npm)

The package server-mini-css-extract-plugin-orogeny-spawn was found to contain malicious code...

MAL-2025-33712 Malicious code in spawn-ganymede-arcturus-dione (npm)

The package spawn-ganymede-arcturus-dione was found to contain malicious code...

Malicious code in spawn-less-loader-enif-quark (npm)

The package spawn-less-loader-enif-quark was found to contain malicious code...

MAL-2025-38689 Malicious code in vuetify-superagent-eslint-config-spawn (npm)

The package vuetify-superagent-eslint-config-spawn was found to contain malicious code...

MAL-2025-27338 Malicious code in neutronstar-higgs-spawn-eslint-plugin (npm)

The package neutronstar-higgs-spawn-eslint-plugin was found to contain malicious code...

MAL-2025-27144 Malicious code in nconf-spawn-mocha-selenium (npm)

The package nconf-spawn-mocha-selenium was found to contain malicious code...

MAL-2025-33713 Malicious code in spawn-less-loader-enif-quark (npm)

The package spawn-less-loader-enif-quark was found to contain malicious code...

MAL-2025-34644 Malicious code in tectonic-ursa-sequelize-spawn (npm)

The package tectonic-ursa-sequelize-spawn was found to contain malicious code...

MAL-2025-6829 Malicious code in tensorflowjs (npm)

Package is malicious due to code obfuscation, arbitrary command execution via childprocess.spawn, and suspicious postinstall script. --- -= Per source details. Do not edit below this line.=-...

CVE-2025-4056

A flaw was found in GLib. A denial of service on Windows platforms may occur if an application attempts to spawn a program using long command lines...

CVE-2025-6759: Citrix Virtual Apps and Desktops - Local Privilege Escalation (FIXED)

Overview During a Virtual Desktop Infrastructure VDI breakout assessment, Rapid7 identified a Local Privilege Escalation LPE vulnerability affecting Citrix Virtual Apps and Desktops. This issue was assigned CVE-2025-6759 and has a CVSS score of 7.3 High. Rapid7 observed a SYSTEM process handle wi...

📄 Remote Mouse 4.601 Privilege Escalation

Remote Mouse version 4.601 for Windows listens on UDP port 1978 and allows privilege escalation. An attacker on the same network can spawn a SYSTEM-level powershell.exe, resulting in full privilege escalation without authentication or user interaction. Exploit Title: Remote Mouse 4.601 - Local...