MAL-2025-44378 Malicious code in garden-those-steam (npm)

The package garden-those-steam was found to contain malicious code...

MAL-2025-46143 Malicious code in steam-balance-today793 (npm)

The package steam-balance-today793 was found to contain malicious code...

Malicious code in discourse-steam-login (npm)

The package discourse-steam-login was found to contain malicious code...

Malicious code in steam-balance-today660 (npm)

The package steam-balance-today660 was found to contain malicious code...

MAL-2025-33972 Malicious code in steam-balance-today050 (npm)

The package steam-balance-today050 was found to contain malicious code...

MAL-2025-33977 Malicious code in steam-digital-card-card108 (npm)

The package steam-digital-card-card108 was found to contain malicious code...

MAL-2025-33973 Malicious code in steam-balance-today528 (npm)

The package steam-balance-today528 was found to contain malicious code...

MAL-2025-33976 Malicious code in steam-balance-today850 (npm)

The package steam-balance-today850 was found to contain malicious code...

Malicious code in steam-balance-today528 (npm)

The package steam-balance-today528 was found to contain malicious code...

Malicious code in steam-balance-today050 (npm)

The package steam-balance-today050 was found to contain malicious code...

Malicious code in steam-balance-today850 (npm)

The package steam-balance-today850 was found to contain malicious code...

Malicious code in steam-balance-today763 (npm)

The package steam-balance-today763 was found to contain malicious code...

Malicious code in steam-digital-card-card108 (npm)

The package steam-digital-card-card108 was found to contain malicious code...

MAL-2025-33974 Malicious code in steam-balance-today660 (npm)

The package steam-balance-today660 was found to contain malicious code...

MAL-2025-18492 Malicious code in discourse-steam-login (npm)

The package discourse-steam-login was found to contain malicious code...

MAL-2025-33975 Malicious code in steam-balance-today763 (npm)

The package steam-balance-today763 was found to contain malicious code...

GHSA-X6GV-2RVH-QMP6 m00nl1ght-dev/steam-workshop-deploy: Exposure of Version-Control Repository to an Unauthorized Control Sphere and Insufficiently Protected Credentials

Summary The steam-workshop-deploy github action does not exclude the .git directory when packaging content for deployment and provides no built-in way to do so. If a .git folder exists in the target directory e.g., due to a local Git repo, custom project structure, or via the actions/checkout...

Linux Distros Unpatched Vulnerability : CVE-2022-49984

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: HID: steam: Prevent NULL pointer dereference in steamrecv,sendreport It is possible for a...

Steam games abused to deliver malware once again

A cybercriminal known as EncryptHub aka Larva-208 has reportedly abused the online game platform Steam to distribute information stealers. EncryptHub managed to sneak malicious files into the Chemia game files hosted on Steam. Chemia is an adventurous survival type of game that puts the player in...

GHSA-C5QX-P38X-QF5W RageAgainstThePixel/setup-steamcmd leaked authentication token in job output logs

Summary Log output includes authentication token that provides full account access Details The post job action prints the contents of config/config.vdf which holds the saved authentication token and can be used to sign in on another machine. This means any public use of this action leaves...