MAL-2025-2570 Malicious code in cmft-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7480b4348d595d2f3e0c25957e99041d6301f7e51593c0334345c1cdfe2a080c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in arnotest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64475736790097a8b2e30db87aa02796673e4a50b3af8e0d633eb261ec376983 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3143 Malicious code in arnotest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64475736790097a8b2e30db87aa02796673e4a50b3af8e0d633eb261ec376983 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GPT Academic 跨站请求伪造漏洞

GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. GPT Academic suffers from a cross-site request forgery vulnerability that stems from a WEB application that does not adequately verify that a request is from a trusted user. An attacke...

PT-2025-12284 · Superagi · Superagi

Name of the Vulnerable Software and Affected Versions: SuperAGI affected versions not specified Description: SuperAGI is vulnerable to remote code execution. The agent template update API allows attackers to control certain parameters, which are then fed to the eval function without any...

Malicious code in ethereum-cryptog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9b4f4e2a3a4121480300942e01892de5c8f71fbecf3f907eb9512d09b0a0a16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2554 Malicious code in ethereum-cryptog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9b4f4e2a3a4121480300942e01892de5c8f71fbecf3f907eb9512d09b0a0a16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in exampleeeeeeeeeeeeeeeeeeee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a66e83d3b408d3cbf134ada9b1ce3dbdc0d15c0cbe493c738afbbd90b49aae86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ember-inner-addon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bbbdbcc5d40cae533849a83ada31138fdc88cd05fc5f9a44dfe836d0c028837 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2504 Malicious code in ember-inner-addon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bbbdbcc5d40cae533849a83ada31138fdc88cd05fc5f9a44dfe836d0c028837 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tasks_mangement (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5af70a269afd5435306a85b902070f929d511d8855e369cc7c930a9dc50be50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tasks_viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21e1bcb65dac0ffae9b7b7e0f14570fa73511f72e91dc2ff7c600497e4d4f9a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2524 Malicious code in plasty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 101f2171688036d97dd4a9278f0e3a13ddc39853c5161ece25ac283a619b19ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2511 Malicious code in importo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0397c53f4eacb57a853bd6f25307c71422bdc3ec34d76419c97f70a6e5251b2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pendeck (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52144cad81187f6ac538b8ed921e0d500b9094449083bb6f7d408e5e7b6ba2d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in syncdaemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5bb66f3a9159e25129919edb2f4a2e771c86ee56706bcddaa2c0c2fcbf0df0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2494 Malicious code in cbridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5753509b5d949697f65234a1cc2dfeeada8873e789415bda2717e17ccab338fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2526 Malicious code in sol-web3-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1af6c83b64b9da58a5d027de1d8039b58b1be78be7f8a3f9df554d15d8c15cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sol-web3-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1af6c83b64b9da58a5d027de1d8039b58b1be78be7f8a3f9df554d15d8c15cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @theoretical123/ethers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38f44d0e1293ff85f758987b79eb290ef0efac3652257af79e2c30e98267c89a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...