Malicious code in santa-barbara-weather-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8063dba7f69a647e89871018d17e8c49075e5fc748a2c5c009aae9a2d5d25e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in your-test-renderer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a1133758e2658958e3fbaaaee2db0c856e5ba745f18589b79e6c04859207dd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5687 Malicious code in fe-comp-input-text-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcb443ddf0b8c18bdcbd7dcfbf6b8e3c2a5ba2614ea22acf4310735a82259d51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fe-lib-localstorage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2248551164f3d70ada0fcc43237796170d7613eb7bce9bcbd718d78b64262f9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5684 Malicious code in data-formatter-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0dd2a4d0c8101cf1e6761361aea7bc9afd9d28010878e44622da7af6fa3dfd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5729 Malicious code in solsafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c0e330c03bcbf5c40a3477fd4fa0029e71ee952bcbdc57bbaf89d39cbec85ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-smoothy-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4605263fb8378867aadba09b4a6f0265ce7325871f0c56d09e75f464cb397e39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prepare-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce87db23628075e87a946b6117721f8fd2f272b5d93e3447e78b58a4a09df2af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chii-aungpao-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7612d6bbbfb9dc1ad7c5edf5f536d13eaa4e20da2e1a895caeacfb8b0e75140 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5661 Malicious code in @bosch-rollouts-extensions/soup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03bf5cb8a8241befda2ac9e7228f23b30a5160b0bd759c8887503d7a6b6cbb7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5659 Malicious code in @bosch-iot-console/monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ed0c2752e241bc41c444130570ce1cc9bfd7162c795da9e4d17b0bc2449c48c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-tsauditlog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 830e528439887027d65ed0697132b3f91dc2b11e553dc12671446d5f6eea1b2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5703 Malicious code in jsonskipy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 825aeade17635320d2922155fc8e36ab7810c8cd83aa62a8521613534dc52e0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in io.ox (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f943d7e85ce7b15cc0e8fa0f234c36503767f627e103ac8062d96f57504efbe4 Any computer that has this package installed or running should be considered...

MAL-2025-5715 Malicious code in pbr-client (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4933f0eae305db421cd46414b1773fb97338c6966af0abd06e1232ffe4c4c96f Any computer that has this package installed or running should be considered...

CVE-2025-42963

A critical vulnerability in SAP NetWeaver Application server for Java Log Viewer enables authenticated administrator users to exploit unsafe Java object deserialization. Successful exploitation can lead to full operating system compromise, granting attackers complete control over the affected...

CVE-2025-42959

An unauthenticated attacker may exploit a scenario where a Hashed Message Authentication Code HMAC credential, extracted from a system missing specific security patches, is reused in a replay attack against a different system. Even if the target system is fully patched, successful exploitation...

CVE-2025-42964 Insecure Deserialization in SAP NetWeaver Enterprise Portal Administration

SAP NetWeaver Enterprise Portal Administration is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system...

CVE-2025-42963 Insecure Deserialization in SAP NetWeaver Application Server for Java (Log Viewer )

A critical vulnerability in SAP NetWeaver Application server for Java Log Viewer enables authenticated administrator users to exploit unsafe Java object deserialization. Successful exploitation can lead to full operating system compromise, granting attackers complete control over the affected...

CVE-2025-42963 Insecure Deserialization in SAP NetWeaver Application Server for Java (Log Viewer )

A critical vulnerability in SAP NetWeaver Application server for Java Log Viewer enables authenticated administrator users to exploit unsafe Java object deserialization. Successful exploitation can lead to full operating system compromise, granting attackers complete control over the affected...