MAL-2025-3598 Malicious code in font-impact (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 404db1db5b86b6ce6ed40f2169b12625d010c431f4610548c55dc053f5d43d69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in adobe-acrobat-sign (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17d7f8480bfb87e856460e7dedfcbc5f53a5bce7d4c34225bb231dc41507678d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wasitestforeducation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3143ff548280d35ca2611e7959f1e56224da26b7b8a56ce97c67509800fba81a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3592 Malicious code in wasitestforeducation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3143ff548280d35ca2611e7959f1e56224da26b7b8a56ce97c67509800fba81a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in selfbot.js-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbdd8332c80f739c8bf3a99e9f32609e53a108f2f7eea79c12d65a8af551c280 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-json-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1e9377f415fba4ec726168295cc5ca3be775a940e1709f6a70a19a6c48c3dd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3578 Malicious code in discord-json-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1e9377f415fba4ec726168295cc5ca3be775a940e1709f6a70a19a6c48c3dd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3584 Malicious code in serverlog-dispatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6dcf491363258b87486dab0c11447d6bfd9cc41eda8ced61c5eaa12f683d688 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in next-log-patcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfce41719d550a7097080921b8d71c939042745806269bbd66ba0e2033dee574 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3591 Malicious code in vite-plugin-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56ca9dc73ad1724cba2621975411cb4f207c06e1526426ef7e257b805ac42800 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ubuntu 22.04 LTS : Linux kernel (Xilinx ZynqMP) vulnerabilities (USN-7475-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7475-1 advisory. Jann Horn discovered that the watchqueue event notification subsystem in the Linux kernel contained an out-of-bounds write vulnerability. A local attacke...

Malicious code in lezer-snowsql (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79d686dc87e1e046c8091bd313f15cba6ccc513fa0effa19a8798c4d23e066c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in meridian-web-sdk-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 006fce4fe9c0fea36046fb81dea3e9c5c48c40c3bb4445001509862a068cd569 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in customprefix-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af67fc99b5f6993bf42c27c8c407c6bee3e97d0f412d03ab30533470b86339d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mymte (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6027158a0ee580262d47f416e7301411cfb068dfee0c039216f1769129190e63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3571 Malicious code in mymte2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc861b79eea3d82ab6dc25824fb7dad325622a6cbe4012fffe07ad7c198b4a73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3548 Malicious code in cxo-storyboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52b7107790e92d1adcdda6e4a16e6496f43bd80329629721bd96a0e03591c4f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-validator-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67d1a336f4415ad211b6844d41de64f77697780083624b44fdeb0e5e9d4270ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ts-39-issue-ts-ignore-tsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c02d4a8f90b9a988e36249fe6014a9902821ad4c16a9857ab195189a26757624 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in passports-twitter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ed2e22762097011eaacc32402595cb2ee0cc37014af41523745f7fd75f14f32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...