Malicious code in gltfvariantmeld (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0155401f6326638ba77892ee9e8132c5d7094e7f8bb20e46f22b995c255ce0a Any computer that has this package installed or running should be considered...

Malicious code in defi-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2a9667f769678a9fe048b57918ea5bfd54ef1323131a91f8d9e581feca74948 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in firefox-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27d723f2db7c5589f68811969f49939e22ad3e71b00f741fc7f19a5bb6464da2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-7506-4: Linux kernel (Xenial HWE) vulnerabilities

Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict the access rights of device backends. An attacker could possibly use a malicious Xen backend to gain access to memory pages of a guest VM or cause a denial of service in...

ROS-2-586

2.586 Remote code execution in nginxCVE-2021-23017 1. Vulnerability Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The vulnerability exists due to a single error in the ngxresolvercopyfunction when processing DNS responses. A remote attacke...

The Ongoing Risks of Hardcoded JWT Keys

In early May 2025, Cisco released software fixes to address a flaw in its IOS XE Software for Wireless LAN Controllers WLCs. The vulnerability, tracked as CVE-2025-20188, has a CVSS score of 10.0 and could enable an unauthenticated, remote attacker to upload arbitrary files to a susceptible syste...

USN-7506-3: Linux kernel (FIPS) vulnerabilities

Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict the access rights of device backends. An attacker could possibly use a malicious Xen backend to gain access to memory pages of a guest VM or cause a denial of service in...

USN-7506-2: Linux kernel (AWS) vulnerabilities

Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict the access rights of device backends. An attacker could possibly use a malicious Xen backend to gain access to memory pages of a guest VM or cause a denial of service in...

MAL-2025-3753 Malicious code in @myop/vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4199f83f340c7a75c1d633190690367da39403fe2d61561ffbf5bf2014b591e9 Withdrawn Advisory This advisory has been withdrawn because @myop/vue is not malware. This link is maintained to preserve external references. Original...

MAL-2025-3748 Malicious code in @myop/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cedbfe96e39f9d1720d4568325348b54f9806c883baab188675958573a2f34b Withdrawn Advisory This advisory has been withdrawn because @myop/cli is not malware. This link is maintained to preserve external references. Original...

Malicious code in dependencyconfusion6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fde19a45f6be5b0f2c1ffc00fb381166f7ec0cbb3d1df2ba0d3e169faedcd72a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3766 Malicious code in just-a-cute-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 762fbe2f0398f3fba03f9f919ed353d349802e39e0942990e4434ec4ddc9c1a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3757 Malicious code in backstage-plugin-kubernetes-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d5e128ce958505a3df2acbdc6b87aaf80b05e6b5a1dec494681ab2ceced6a0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3762 Malicious code in digitalexp-generic-action-executor-base-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c74e71216b7e6bb7987272c4df125113848f3e422b43e05ac07e53a4358e9d85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vojislav-web3-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec0615ccf6220b2f71802d071574e6dd419eb49061805b9c05aee84eacc51df7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3761 Malicious code in dforce-staking-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51b7aa18ddef6a3d8adeb5b58454b0054055db56c5d22718d55544b309b8bc0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in frame-minter-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edbfd183462b159a20b8cfbbf493357ec40a76dc283c070eb9a9dfb8e4f172fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coinpayments-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03cd3ad7581d9fc90c9a03479a13f8edcb80a999a15a2d7c2dcfc0a30b6b6ac5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3777 Malicious code in zksync-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0af13565b82b48cb80a58f21db293bbef9f5ef83e1c4fdcf67534110215bab9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3764 Malicious code in ghosts3c (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4043c1bd543dfe1287c1dd1d9b016beb0acfc6d126754bd599179713d3e36966 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...