MAL-2025-309 Malicious code in sdk-coin-bsc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6650f990174d70d2afd4e0e2d02ef38866923c1d7d37e4acac1bed21b078bc19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-310 Malicious code in sdk-coin-bsv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ff426abeac1a362b4c6e28dcb79500a3081d0b1b5c4fa0945805a55b97adf05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sdk-coin-bch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c438437d2b489e7c765c8ee7c5acc09b5f162251963c40844c5f12f8d90d2fab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in create-calypso-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df093bf0b3032586592d593a554c740ebe09f794cffc403f26b07319dd426d84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-319 Malicious code in webpack-inline-constant-exports-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb8ae870fad74826ac57af33f27bdbe9e74f667ec62aac01b5c9e55a47d36001 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-292 Malicious code in design-preview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffc37b5b24f991c9971b396f89d6033730450e10bb121b33c1bbe183d4a636a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in popup-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf12287bc6bc8081a72eebd8ef2caea2807d4875c6a3a4f65648d9e61125ef4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-308 Malicious code in sdk-coin-bcha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a41b6c02dc6baa29b6ae516a437b5a11249d4b4937d56088fa5643e048905d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-270 Malicious code in aem-spa-component-mapping (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96b1b3d4405a0ea27ac00cb9f96e4e70aa642f96018fa9b52508da4e98f1a6cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in calypso-typescript-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc88471b8b8d98c729b5e4e741f7a4730627918e7f07353ebf02bb22fe52727f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aem-spa-page-model-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f616d81322d87ec1a782a237c4b35c53512cc3e470b9fddd65db49c0c14d1425 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in calypso-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f91f51457583618030507311d9163d984ed5582cc30846a8ba780131d6823879 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in calypso-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b98eff47a4acde03f525440e1a5b4a46bb09d9766422550e449954a95d3cb607 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in calypso-color-schemes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f99641bd891e5d4efbb233820890cd050e68eb6a5e71c23609dd1a1ed888254 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in calypso-babel-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b19b336747cffb6dcd17e2bdf7369eaeffb28fe85d0c8198710e89dbced26e94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ether-wallet-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d172270596e32a7b2091c6879f6bf48d40efa4dba80b6a1807ebb8bf9aec0846 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ezcolor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14686eb8b73cb1b789f94e4e58993478025e236c7e9fafeeda25a073b1a7760e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in no3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 322a77395d2488412e9dbb8c78327779c4912e90d1e0136e14fd924ceea5817c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-0479

This vulnerability exists in the CP Plus Router due to insecure handling of cookie flags used within its web interface. A remote attacker could exploit this vulnerability by intercepting data transmissions during an HTTP session on the vulnerable system. Successful exploitation of this...

MAL-2025-248 Malicious code in stormapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf02bb5fc1c5f143294af3498d46e9aeb5dd417c0559e287c9313cee7b3f43b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...