MAL-2025-2735 Malicious code in crash-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80ddc752065839529322059bc8e3819805b3124a81dea81cfd0a905b9e8a4371 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GPT Academic Cross-Site Request Forgery Vulnerability (CNVD-2025-22738)

GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. GPT Academic suffers from a cross-site request forgery vulnerability that stems from a WEB application that does not adequately verify that a request is from a trusted user. An attacke...

Malicious code in bagayaluzqdl159 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7811a14ef94ae6d98abe542d9f5c3d933e30c3a7d85a4f5fe707e102acbb6f2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-clog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b79afa3c5e7683904826177bb23fa862588f63570cd13fdb1aeda910d3c5ec81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2660 Malicious code in consolidate-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab51d3f2f1f669e9f16db54bd9c1699dcc1dfa4e1f6c8f9b6dfa0174b331f3e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2661 Malicious code in consolidate-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cabd5f8487415db9bef4d60ff036c16f1390e7d129fa4fbd96045e096eb1e897 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in loglo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c644d48e0fecc2efac60d1def8ed1015b9c0bdc932f0bd6d8bdd462b67c0aa3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-fiber-debugger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00a91ebc181430303bf3b5c3bc93cd1bf2a4b2727ab2767fa5998456f8602156 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hahahahahahahahahahah (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3581359b4611ff132b7f650da555763d41e8ca8f56c06b68ae7191b57e0354d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2701 Malicious code in realtime-solar-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1632f239d70140dcb116eb7fecdf6fba75631259d95e280f2e487f6acfd79133 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in atlaskit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53c2e76bf702d1effe3dbdd769b8d5be4ab4cf0d86dae87ff1aeb9b94e4c6f24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2720 Malicious code in wave-charts-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03df1ae8e754a6d851def9997b02f9ef24887e3fdeffeca63324daeda5d1708d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2654 Malicious code in cdn-icon-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c5df12b33f292879e5c1199fb8a0130cbbb1a1cd4cf1d3e72cb723143ccaa1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2697 Malicious code in patternfly-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb2fd8e936317fc9125f41ad0600e981e709900ce289e48fcd9e323d3a062247 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2704 Malicious code in sensort (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d37ba8a05528220f9ba8b136aec01eddb7d39aa42b3cd9a496f27b25c31ecdfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2635 Malicious code in @sensort/mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfb2a761e35021c8cfca9951c826bdeb679e0667dae74308df6d84a5f3c10bbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2631 Malicious code in @ptc-ibm/greetings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb6891168044d828b2b9141fda25b3b167300de37f009d47a58577c4248163e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in justinmimbs-elm-date-extra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11af7440e5eacd7d966f3a8948c08a28c29eff3b39493714c76c2deec71592cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @mint-lib/routing-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97df96fcfd4afed289291f55c411b10293b85a52d658e3f35b74cc4969fc30df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2628 Malicious code in @mint-lib/query-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6ac51b11c2e630ce893cff684562507667c0ab42c195ce066e9cd708d42c44c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...