MAL-2025-4556 Malicious code in eshops-components-library (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a20561457dd9785f7621da2f5ace77796b38b368bd65b5b7b9df7a00df4f034f Any computer that has this package installed or running should be considered...

USN-7510-6: Linux kernel (AWS FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Network block device...

CVE-2025-41651

Due to missing authentication on a critical function of the devices an unauthenticated remote attacker can execute arbitrary commands, potentially enabling unauthorized upload or download of configuration files and leading to full system compromise...

CVE-2025-41651 Weidmueller: Missing Authentication Vulnerability in Industrial Ethernet Switches

Due to missing authentication on a critical function of the devices an unauthenticated remote attacker can execute arbitrary commands, potentially enabling unauthorized upload or download of configuration files and leading to full system compromise...

CVE-2025-41651 Weidmueller: Missing Authentication Vulnerability in Industrial Ethernet Switches

Due to missing authentication on a critical function of the devices an unauthenticated remote attacker can execute arbitrary commands, potentially enabling unauthorized upload or download of configuration files and leading to full system compromise...

CVE-2025-41651

CVE-2025-41651 concerns a missing authentication flaw in Weidmueller industrial Ethernet switches (e.g., E-SW-VL08MT-8TX, IE-SW-PL10M-3GT-7TX, IE-SW-PL16M-16TX, IE-SW-PL18M-2GC-16TX). The root cause is lack of authentication for a critical function, enabling an unauthenticated remote attacker to ...

MAL-2025-4497 Malicious code in react-blockchain-checker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3d5628d888e7c28f26a71142f402b8ad017dacabad04cbf0a71ac4c43223f46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4496 Malicious code in rand-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6436f09942f4f079368c746cf4533b29a25e588f206b9fe93a3162cc2af031fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in front-exporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3722d7f5ad91f5a20aeeec9851391de8a664028ba2cedcc130c247042c459ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in athira-windows-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd39f8b3ce4727e8aff369ad5c9f43fab1e5e99643c24cc5aede40077c80e59e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in athira-darwin-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f5187d16196b84804557d150debc4215dc39e15856b77fb994551bf7457299c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4504 Malicious code in skinnyvans-darwin-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b640328fee2106b3dea2217776fa00ee07982e485871045f8e3be307311062d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in skinnyvans-linux-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4548827f9bd601d4ff29713865fca74fb2e28b90aae485f5656f48ac2a6275e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in microbundle-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee7eca742d3841aad55bd259950b4c33702da5c8bf94becda043530ff8ddebd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4470 Malicious code in athira-linux-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e427393183e173f65795c42251b41cf0af7ad267e64f05e6651dc4e0766b150 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nistagram (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d6ca9092341ced6379d414f9e438aabd38664481134f9685c69b43ce977247c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in interview-coder-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7544d4b6f6bedbc4b2c443dea83d3edf5047cfe7335e138c3060870e7921374d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4498 Malicious code in react_code_format (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 361ad03064f5e32012ed273f2a774a1528ef81284235b9757bb2947671dff09b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4476 Malicious code in eslint-format (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 990c333445462efa33b1726d3ff2b0b14a86a3c474eb5f2564f583456e64cb0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4525 Malicious code in zeal-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b52d172cdcd738359992982c891dc3da3b7c4403d5cb3cb4fc4eb1650113d3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...