Malicious code in react-event-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7117f482ca3c7fec4102581d249b98a017fe0b05eb1dbc836070e0f0c8b245c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2296 Malicious code in array-empty-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9923e27ee77980880cfc13a3c78c4903c58bed58f9257ac0407d57841fcc7853 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2310 Malicious code in event-handle-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07ebcac63455f7e71c3494f3d9dcff8de8fcc17290bff93372dd297555198012 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2316 Malicious code in icloud-xod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50cd66ab9cb1375f4aec21ca16727392430962995f1140f32f6af4a21d3978ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2320 Malicious code in mern-ecom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81fdc4ccb8d87c17695fc5ab8f7f8e41ace4f8047187df568530dc8f34d311d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in support-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fbedf2740f548b8d717a797c16780ec5e7a92090ca88a0b0aed5ec85809514d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2323 Malicious code in profile-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b80f14b143352696756a497488d6488fc916c23c01fe1af2b943db50cf1e6f13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2327 Malicious code in rolldownload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e57796af333715605cb3404f3d8653189e6859e7d409e69670109ab17dad2ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rc-upload-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8c8a04b14788b037fccbfd5f9be8c5f83d54da6321b13d213287d683a937baf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2328 Malicious code in shein-feedbcak (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 379450f40d6ee2e16f34b93d2fec2253b578f9c9160b45de1bafcaa042ce4c9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2329 Malicious code in shein-uesragent-detection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdca3a489ad131847e2e1677f86805c89bd1587e8a76fb2fea69415952284909 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2335 Malicious code in ward-steward (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97a827b103b01a6bf01068abd3e9602f463700eb8f9e66c2cc6b051374d1f40f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2305 Malicious code in cryptocom-ai-agent-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4b95f332dde178bf7e9fd99a6d8dd252a590ca10ecdb653ab105c5fe1e6b796 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2312 Malicious code in expect-violations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d98ae6c06bd6b1cd2115956a382b7cdd4a1901560535df9f8284ef29cb6a4550 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-11096 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability exists in the Command Line Interface CLI of Cisco IOS XR Software due to insufficient validation of user-supplied arguments passed to specific CLI commands. Th...

PT-2025-11125

Name of the Vulnerable Software and Affected Versions LLM-Claw versions 0.1.0 through 0.1.1a-p1 Description A security flaw exists in LLM-Claw, specifically within the agent deploy init function located in the /agents/deploy/initiate.c file of the Agent Deployment component. This issue is a buffe...

Malicious code in gh-node-module-generatebom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a04173cc21773450d4bd86768588db1893acb72fbc0336681a1370f3c7e8e781 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bastion-react-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b653fe85132d2b38f6455a8b98a9d59deccd8982eaf7c9e13d97d1037dbc6a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in www-discoveryeducation-com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b81d0d31dd0c1ad59b382392dd3309ca9d6ca9ccafde5ab54ee3c7a4c38fb20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rexz-imagine-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a5880974c43ddaa1e24f3eecce7e9eb1e66d31adb347a095436a27316c30097 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...