MAL-2025-3591 Malicious code in vite-plugin-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56ca9dc73ad1724cba2621975411cb4f207c06e1526426ef7e257b805ac42800 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ubuntu 22.04 LTS : Linux kernel (Xilinx ZynqMP) vulnerabilities (USN-7475-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7475-1 advisory. Jann Horn discovered that the watchqueue event notification subsystem in the Linux kernel contained an out-of-bounds write vulnerability. A local attacke...

Malicious code in lezer-snowsql (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79d686dc87e1e046c8091bd313f15cba6ccc513fa0effa19a8798c4d23e066c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in meridian-web-sdk-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 006fce4fe9c0fea36046fb81dea3e9c5c48c40c3bb4445001509862a068cd569 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in customprefix-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af67fc99b5f6993bf42c27c8c407c6bee3e97d0f412d03ab30533470b86339d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mymte (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6027158a0ee580262d47f416e7301411cfb068dfee0c039216f1769129190e63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3571 Malicious code in mymte2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc861b79eea3d82ab6dc25824fb7dad325622a6cbe4012fffe07ad7c198b4a73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3548 Malicious code in cxo-storyboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52b7107790e92d1adcdda6e4a16e6496f43bd80329629721bd96a0e03591c4f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-validator-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67d1a336f4415ad211b6844d41de64f77697780083624b44fdeb0e5e9d4270ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ts-39-issue-ts-ignore-tsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c02d4a8f90b9a988e36249fe6014a9902821ad4c16a9857ab195189a26757624 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in passports-twitter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ed2e22762097011eaacc32402595cb2ee0cc37014af41523745f7fd75f14f32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internal-payroll-lib-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38b57b13614231552ff2a81bd698a53edcac5cfcc943ef879a6a2e1de08d7fed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mcrodoasp.net (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27d0c48004e63925f1957b358fdf0cc95f5d6d045a8ed0ee2073b00a64fb600e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in carcandofilex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d04f8661d47623c323ee795cb954afb6a58fcaaae0b911beb0f6752004996496 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PyTorch Remote Command Execution Vulnerability

PyTorch is a Python package open-sourced by PyTorch. PyTorch suffers from a remote command execution vulnerability that can be exploited by an attacker to execute arbitrary commands on a system...

Malicious code in devel-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6982cb557467101f1484d126c8ff52717e15eb199a30a8089c7d099caf9eaa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @baywa-re-lusy/nsemea-address-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72abc75363d3a49d94650c8b66324e9d38506ea8e2724a1521a930555a996faa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nsemea-sample-parenttransaction-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a41c3f9782e1fb062bef2307e7300491d25460f761f7e9da305bc92e541c850 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webview-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 350de9d57836c502b1910805b2b6d9a4e1f5aad34e121671d5482c073889894a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3528 Malicious code in metadata-collector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d0c00e28320e5a836d89bb26152ff2b5c4989287285bb5071872ad3413821cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...