Malicious code in internal-payroll-lib-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38b57b13614231552ff2a81bd698a53edcac5cfcc943ef879a6a2e1de08d7fed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mcrodoasp.net (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27d0c48004e63925f1957b358fdf0cc95f5d6d045a8ed0ee2073b00a64fb600e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in carcandofilex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d04f8661d47623c323ee795cb954afb6a58fcaaae0b911beb0f6752004996496 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PyTorch Remote Command Execution Vulnerability

PyTorch is a Python package open-sourced by PyTorch. PyTorch suffers from a remote command execution vulnerability that can be exploited by an attacker to execute arbitrary commands on a system...

Malicious code in devel-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6982cb557467101f1484d126c8ff52717e15eb199a30a8089c7d099caf9eaa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @baywa-re-lusy/nsemea-address-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72abc75363d3a49d94650c8b66324e9d38506ea8e2724a1521a930555a996faa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nsemea-sample-parenttransaction-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a41c3f9782e1fb062bef2307e7300491d25460f761f7e9da305bc92e541c850 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webview-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 350de9d57836c502b1910805b2b6d9a4e1f5aad34e121671d5482c073889894a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3528 Malicious code in metadata-collector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d0c00e28320e5a836d89bb26152ff2b5c4989287285bb5071872ad3413821cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-hashing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5d317a1c60082e11dcf4b2d8a23616192cc326cd4fa14d1dd132b164d87fdce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3502 Malicious code in node-hashing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5d317a1c60082e11dcf4b2d8a23616192cc326cd4fa14d1dd132b164d87fdce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3486 Malicious code in auth-help3r (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fcb399ae4d0f936194424a6a54364f75f3fc4728a9bcb599e3ac9082a380c46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3504 Malicious code in turbo-bike-inspector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b2b7e282a4f78a18dbc7c28f2200bea91788bc176c9f76173a34af8ead206dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3497 Malicious code in jd-npm-com-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f205097feb67db492d1ce42f141278ef445cb7792b8c530f866eb0a837e6d47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3496 Malicious code in jcp-benchmarking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b0e185faf71a47d06bf407e04233da78db300929cea4486b8c8df41edbc6c67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jcp-benchmarking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b0e185faf71a47d06bf407e04233da78db300929cea4486b8c8df41edbc6c67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

CVE-2025-32433 CVE-2025-32433 Summary and Attack Overview CVE...

CVE-2025-3509

A Remote Code Execution RCE vulnerability was identified in GitHub Enterprise Server that allowed attackers to execute arbitrary code by exploiting the pre-receive hook functionality, potentially leading to privilege escalation and system compromise. The vulnerability involves using dynamically...

Malicious code in dowload_ebok_englens_spil_by_carlos_ruiz_zafon_iben_hasselbalch_lqvq8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a13704c12e7e39594e32a2fa929139780659e502c52a16c0d1e57c897b561c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3388 Malicious code in dowload_ebok_englens_spil_by_carlos_ruiz_zafon_iben_hasselbalch_lqvq8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a13704c12e7e39594e32a2fa929139780659e502c52a16c0d1e57c897b561c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...