Malicious code in fnd-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2bd94b1bacafc118701343fd0538943fa1b8d0f44cb6e2418ff9feb47ab171e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in data-ui-v (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31699b2697ce8618e833f2917ee401c8d6a8a1300cc5d48905de3fd7895c9577 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gl-emoji-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbf0085827239922ce13937a55f76a51d8017ed351ca34e30214b10670b558a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2401 Malicious code in process-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8116c15eee956d7e82aa0fb093ae7d010310e9ca155a99918732c04ef0114922 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in new-nav-docusaurus-2-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 056a07097ce29a75544b9e104af6e236c35ff7aeac79d48c35c1a208a779f41e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in smart-power-strip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1cc33c4b430e08bef89e4f67199d79002235613631ee986f8566d757fc14ea7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2410 Malicious code in request-draft-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e20e7c9b27e44bc6a2f406fc1638d5949e6a8ff79801714031432723b004872d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kamino-modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ecb59e56c69eee3911cd10b7de6d341cf4d2f2f41bab590b44428c5bfd8348b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2388 Malicious code in kamino-modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ecb59e56c69eee3911cd10b7de6d341cf4d2f2f41bab590b44428c5bfd8348b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2412 Malicious code in scriptconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bd3ce93e4d932714fc3eccce5d02ae6e79657a46f27202ecbe3278d0414555e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2399 Malicious code in plz-bas-ek-bar-dilado-batman (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa8be0f4474626ccd60533895a89a14daacd056083e7ec492f5015b7bd84741d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2400 Malicious code in postprocesstree-addon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5eab27dd46c3373a4894cc6c2fb16dc6ad78c99f19e516a3b2fa843e46adb766 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-highcharts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07b07952c4a78f4c462a288e6a648a238e98bc0232aa1e4bf6a0e5ad25bf3507 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2359 Malicious code in aiven-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7ef5fbee116dc7c6a033971fa455298110b289026b14470eb6120ae7aa06467 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2353 Malicious code in @sheingroup/loveshiro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 524a8945eaa3e9c0e35a456f440638f7568e971bf57dff30c9b6a4cd0be14714 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sheingroup/loveshiro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 524a8945eaa3e9c0e35a456f440638f7568e971bf57dff30c9b6a4cd0be14714 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2395 Malicious code in nicegirl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05d61fc6a090b764666270f91b100bc166fbb85c0227ac947e1bdc876bc8e6a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

InvoiceShelf 1.3.0 Remote Code Execution

This Metasploit module exploits a PHP deserialization vulnerability in InvoiceShelf versions 1.3.0 and below that results in remote code execution. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModul...

Malicious code in paymentread-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99ea0fd7ce8df578106ddafd97e7ce60c03a1b0c1481c5a1caa636edd634246b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-7332-3 linux-lts-xenial vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - Block layer subsystem; - GPIO subsystem; - GPU drivers; - Media drivers; - Network drivers;...