MAL-2025-4922 Malicious code in ac-ajax (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6104c32d3a2365656156e83b9d2484fa03258db82702dc5c8e772a97ee067968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-3052

An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software. This allows an attacker to control its value, leading to arbitrary memory writes, including modification of critical firmware settings stored in NVRAM. Exploiting this vulnerability...

CVE-2025-3052 An arbitrary write vulnerability in Microsoft signed UEFI firmware from DT Research Inc.

An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software. This allows an attacker to control its value, leading to arbitrary memory writes, including modification of critical firmware settings stored in NVRAM. Exploiting this vulnerability...

CVE-2025-3052 An arbitrary write vulnerability in Microsoft signed UEFI firmware from DT Research Inc.

An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software. This allows an attacker to control its value, leading to arbitrary memory writes, including modification of critical firmware settings stored in NVRAM. Exploiting this vulnerability...

CVE-2025-3052

CVE-2025-3052 is listed as an arbitrary write vulnerability affecting Microsoft-signed UEFI firmware, enabling code execution of untrusted software and potential modification of NVRAM-stored firmware settings. The CVE entry shown links CVE-2025-3052 to DT Research Inc. in the CVE List entry, and ...

MAL-2025-5033 Malicious code in hello-gator (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99c626fd5c61521e9e6c52377eb5d3a75ea4230c12ca16c294e86ead8364c064 Any computer that has this package installed or running should be considered...

Malicious code in talkingagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3405c426e57de2c17c74c5c754610648c613e377d1b63a59e24d767241599030 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4865 Malicious code in processwithcloudevents-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8c9351acabc986c61d13f3792948c4426e4f75423a912f6a4cd08f046bdf07e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4818 Malicious code in bs58-decode-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 365e9781bfa38295c42e9eb63d2506e4d79922f9040b5ca8f39544eaab056c91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @mediawave/lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5728f228ecbe0dfd5db6afd530842107e9356201123b885d36418429c37ffbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cwttools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca62534e7711771b6dd288ab65012fd737ec6e0fc380035eb827dddef397ee86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ve-cores (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67e2fbdb6cafd7eab8bb680d66240f47ddaa35deaf4c5b4263899fab736fd522 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4800 Malicious code in @loybung/inject (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2360caebc7c178c732c57b8da900d7e303a05b8a498693b6f6449abad8fbb19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4803 Malicious code in @loybung/rdcw-slipverify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7639ec9b1c91e31de9ce47694aaa7659cfe7c15cd34c46e7ff2ab7eec1aed079 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @loybung/discohook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2dac5ac825599d74da445d116432e53214d07346514de5ae412176b7977c2c69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4808 Malicious code in @loybung/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e4ad6dc27f068d9c2140a021ffc400d65281d8cb3bc6f19890e071c25e51492 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @loybung/textfont (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36aa7aae9f52d1ffdfc4373795d75aa854663263402260a93cd100509f9a8833 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @loybung/emoji (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b93520f6920db8156f89701cab5337d1aeb0421b6e8d4a598896dd12b78aad06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @loybung/rdcw-slipverify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7639ec9b1c91e31de9ce47694aaa7659cfe7c15cd34c46e7ff2ab7eec1aed079 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4911 Malicious code in yt606060-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a34a6e4b5985ebe933d9f77c07d0caa2d2c46ab01a085ddf49c79d900474f83b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...