MAL-2025-48441 Malicious code in webpack-loadcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d590321a232bcb801aa8ef974d8eca8774570f32d2f87e026c6694aff0a6bd45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48438 Malicious code in n8n-nodes-phoai-ultimate-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe0597dd3ed4c831f52ef8792943f8d12a9880e5f4a3777f84e83284d14ffe78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Microsoft Excel Code Execution Vulnerability (CNVD-2025-24402)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...

MAL-2025-48435 Malicious code in pino-logging (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c35f1cee310ba73ad606845b7bf6d537b00db69bb318d6adf7b816b35d3d5690 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in package-f (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1deec43d176fc23dbd4cb44b3e1d4e90821cb98e441004f83c872d49ca281ac9 Any computer that has this package installed or running should be considered...

Malicious code in vite-plugin-parseflow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6264d2fd8e60e842a2b4b3e0d5b8da287d27e021ff47460da70171fb82adf3b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-40774

A vulnerability has been identified in SiPass integrated All versions V3.0. Affected server applications store user passwords encrypted in its database. Decryption keys are accessible to users with administrative privileges, allowing them to recover passwords. Successful exploitation of this...

Malicious code in deficonnect-private-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26fd8af3107a958bc5c4f36594967520138fa3593b48322649201cec725af371 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deficonnect-internal-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6f3098a58343ae74219c429df56aab7d01b71a39b84a9165b0ee3679a6964f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scouthus921 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2e34a89c347498d30a051b684807d976b3a5384c3f333621359e5a0fc90c8ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-40774

A vulnerability has been identified in SiPass integrated All versions V3.0. Affected server applications store user passwords encrypted in its database. Decryption keys are accessible to users with administrative privileges, allowing them to recover passwords. Successful exploitation of this...

CVE-2025-40774

A vulnerability has been identified in SiPass integrated All versions V3.0. Affected server applications store user passwords encrypted in its database. Decryption keys are accessible to users with administrative privileges, allowing them to recover passwords. Successful exploitation of this...

Malicious code in akdump (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 768e342b3ebe7ed62b20a4c11a721d893c64dc61ba45f4933d52d98b6c9d1135 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kmf-cookiecatcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43f34feaa70eda2d6c1595e358d6c566d1c56c87a35c2c4cb191f4d38c279564 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48430 Malicious code in debug-mj-v3 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74c0451e3b813ae12fff8e9f76bd4570a074a6bda1a7391e28f789182a6cb0e6 Any computer that has this package installed or running should be considered...

CVE-2025-31996

HCL Unica Platform is affected by unprotected files due to improper access controls. These files may contain sensitive information such as private or system information that can be exploited by attackers to compromise the application, infrastructure, or users...

MAL-2025-48344 Malicious code in scr-notification-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14d05f282e7a70683de50d4006c1836acb08cf541a4ff5070fb01ad3697a9875 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48334 Malicious code in mad-1.2.6.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff8f6a30a3a4c3dd2ceacebffcb4ed4cab2ba455385658372bb3de1e0a9af157 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48339 Malicious code in mad-8.2.1.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1fd4259c0de84b69ec4997af8ecf958bef9b6dd06c7ed580c56cfdb9baedc2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48324 Malicious code in internallib_v125 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab77b49975a46f2335153950e340dc04f11da41aebe8c463f96f99d7e831fff6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...