Malicious code in @liquid-web/mileage (npm)

The package @liquid-web/mileage was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8574d7642f0f1a5d62c5aec640322437ffa389e114e7cdbcf7834417d9bdab8b Any computer that has this package installed or running should be considered fully...

Malicious code in @liquid-web/interceptors (npm)

The package @liquid-web/interceptors was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab7a1c47c538682d6263db28f68b16539bd0b759d77d715766652c07ad79c1b4 Any computer that has this package installed or running should be considered...

Malicious code in @liquid-web/app-services (npm)

The package @liquid-web/app-services was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2360336c035ddfac0df30665d2e803482a726fbf6c47738903b8d3b7eb6c248 Any computer that has this package installed or running should be considered...

Malicious code in @liquid-web/models (npm)

The package @liquid-web/models was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94c4dab8510635c784a7216857ef9d389224b338150feaf297bbb75eb824bdcf Any computer that has this package installed or running should be considered fully...

Malicious code in @js-to-lua/lua-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ddfe717b22bb57e4e1887887c45646abfa625e1d566049a635b86193170cdf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47001 Malicious code in @exarad/verfuegbarkeitspruefung-vue2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f86a6bd18481e0c93a7bf14bfe6587d56cbfcc1e57ca80de8813016f1e931b0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @i22/rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47748ea5218b5ee35bfc50b911a7a41d04d1e19a74832b73679c1c376133dc79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47002 Malicious code in @i22/rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47748ea5218b5ee35bfc50b911a7a41d04d1e19a74832b73679c1c376133dc79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @js-to-lua/handler-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecbb26f98b0d1520a3801861e0c434568d5ac1958606124e217a6e10eda3c436 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47000 Malicious code in @dtpk-cc/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0b1e4b6fe7f3d42a2752aea1642dd9191f6afeb4dcca96ef97a65b5af5cb192 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47006 Malicious code in @js-to-lua/handler-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecbb26f98b0d1520a3801861e0c434568d5ac1958606124e217a6e10eda3c436 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in filigren-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b84001265dc640f83d6ea3e8dd5ac422aeb96be876ac2b9c9482b846b5d735b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47023 Malicious code in x-session-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 656368dae017043edc5b926e1ca7ff9f6e3526b8de21a92a3ce573d70d89ba07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airbnb-slider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e14e7159b2af9b0e1adf08f5ab0d9faf24eb07261813dbe0af5cc48ff579f48b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-54084

OS Command 'OS Command Injection' vulnerability in Calix GigaCenter ONT Quantenna SoC modules allows authenticated attackers with 'super' user credentials to execute arbitrary OS commands through improper input validation, potentially leading to full system compromise.This issue affects GigaCente...

MAL-2025-47052 Malicious code in audi-footnote-reference-service (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c035d5ff92937ddffc6c544ab41cd4721ed9e798733de1f734142b33775388ca Any computer that has this package installed or running should be considered...

Malicious code in prebid.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eef953008eb973c33cf8b72ff438a35d772797bcc989e0d909db32655f30615d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in car-configuration (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdbf9748a3a58d22a8e743b19e6a1b1d190d946e25490ccd6e313c16426b3782 Any computer that has this package installed or running should be considered...

MAL-2025-47116 Malicious code in dev.voltstro.nativearrayspanextensions (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 733417d5ec820fc84810dd975188f83722c7724ae8e981b78e9efe92380f2345 Any computer that has this package installed or running should be considered...

Malicious code in dev.voltstro.nativearrayspanextensions (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 733417d5ec820fc84810dd975188f83722c7724ae8e981b78e9efe92380f2345 Any computer that has this package installed or running should be considered...