MAL-2025-48570 Malicious code in mender-conductor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2aa35f37c40538fc027dc3f86e83c914f7285a8968a9811e5bbc8a5fc5b863da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deployments-enterprise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ba6d5d2de9ef4fd28b80daa2474015f2574ae70d3ccb9ea5c41c73c2f846bda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48560 Malicious code in create-artifact-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17addb465b6ed297d01361f4bf1b6b46f5eb2917622ac0f7b577dae8e7c29cae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-medias (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b5575c56531df502495b31c4b90170d35d991772b25b712d15dc9fdac0e33df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48551 Malicious code in react-medias (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b5575c56531df502495b31c4b90170d35d991772b25b712d15dc9fdac0e33df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwindcss-awesomefont (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85ee9e62f66e09344e931a1854ac52622771856fda95ece5f148374cc50b406b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-43245

Name of the Vulnerable Software and Affected Versions Zippy versions through 1.7.0 Description The software contains a flaw related to unrestricted file uploads, allowing the use of malicious files. This could potentially allow an attacker to compromise the system. Recommendations Update to a...

MAL-2025-48740 Malicious code in m0chan-does-notexist (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1d626c9b409f214548f5c0c09aa9b0336dead92b7a4f8c5f290a7f80d4ff87f Any computer that has this package installed or running should be considered...

Malicious code in react-prop-types-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3226e349f00c076cedb138b9c993caebe82069eceb0cfd079c66e79cfde00310 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48544 Malicious code in funny-pad (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc3cde1ae2412402edab8edbe484702139f4baa345143fb9973baaf3a947f242 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @jdei/codmi-figma-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fecfd138476c3c3b51878bce2a48c0b9d4ffb9f2d5476a90edeef147217eb29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48542 Malicious code in @jdtaro/dynamic-devtools-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31153e0cd25bffc9c1582e7fe176e131e49c4a1fdfdc58c55cdf25dcd99a5b55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48530 Malicious code in bcrypt-js-edge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bca5605febed4ebf8f03746e572ca1fb05186ff2714f0f1c34842fc4858f9fa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwindcss-setremotion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc6c0febf006b7df82465523db849fefa589b2b2f0a170de7d93ec856c729de2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ggtech2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 402a2de5aff6b47fccb36fb23db1070eee17b8a098c87b256108ee8c7d793021 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-7829-1 linux, linux-aws, linux-gcp, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-xilinx-zynqmp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Network drivers; - Netlink; CVE-2024-26700, CVE-2025-38727, CVE-2023-52593, CVE-2024-26896...

Malicious code in hari-zzz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81362ae48dc13755d39b24433b10aae444d143cf59e5e9a66a68f303fb5bfe7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48518 Malicious code in dist-decoder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d6276f9115715018347a416b17686c81064ab130b386dacfdbe52f80bf1a2d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ggtech (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d8cf2fc1fc656139527e8de1f48461e0236042e241e681f04dc59b29b8c961e Any computer that has this package installed or running should be considered...

MAL-2025-48442 Malicious code in ynab_api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89651853affef6883ac4048c42b47d47b023d454db86fecabcd3b8ec15f1c0f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...