Malicious code in gateway-hsm-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0749bb94e6b7e493b7f25152e4ebfc6d99b6e4e59fe32b075860382d66089417 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in core-exchange-spec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25841b252b02710b4266777e5590f4848c43a4cef55f97355283e0db4fed64d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1129 Malicious code in hakana-vscode-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4283dda977b9f5905c6752d3d3f8b09b8a15f375ee7d903bb800e86d10e2db11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tinyquickstartreactnative (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2ffe206600babcdd429e51d21c0d9e150d1542aef0b6eef05cd70294e35da1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1179 Malicious code in tinyquickstartreactnative (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2ffe206600babcdd429e51d21c0d9e150d1542aef0b6eef05cd70294e35da1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sendinblue2019 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fea3b26c71619ef68e89535bb38484e7a23d967e7ec4c6b044b9e29d3a65ed6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ubuntu 16.04 LTS : Linux kernel (Azure) vulnerabilities (USN-7233-3)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7233-3 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

ROS-20250203-05

Vulnerability of vim text editor is related to buffer overflow in the heap, when switching to other buffers using the :all command. Exploitation of the vulnerability could allow an attacker to execute arbitrary code The vim text editor vulnerability is related to bounds errors when processing...

Malicious code in victory-native-xl-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9101dd18b0880eb5358d74e5a997f3a532b49825b6a4cb47d96778143a48b4a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-paypal (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 667d1b093499f31a7533aa131e6a6a7833a64bf1100de5a7b1369f07b30ac93b Any computer that has this package installed or running should be considered...

Malicious code in checkmkwebapiclient (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80e93ca8bc4d8e693d92b36f85b474da9e452eb96ba70f5229f6d1f0fe14d645 Any computer that has this package installed or running should be considered...

Malicious code in isctf2 (npm)

The package opens up arbitrary backdoor port that allows bad actors to connect to. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 539f5cd801a6661acb135e95f2a3d7e10131795d17c2395ae0b3b804a3263b7d Any computer that has this package installed or running should be...

Malicious code in momnet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db49a6a7ccd97fb305c1f35bd000db30977e139b1b9007a4e71975ee27b7b85d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-720 Malicious code in momnet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db49a6a7ccd97fb305c1f35bd000db30977e139b1b9007a4e71975ee27b7b85d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in backpack-foundations (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4bba8fcd3cb3b4c99abd7a1cff3ddb0e0c15a179005fbed75b0441572a2dad1 Any computer that has this package installed or running should be considered...

Malicious code in old-celo-base (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d16d8623e169f195cbb3deeebd0e37b8e6ddd13cfdd5a9b2ece072f3e0170a1b Any computer that has this package installed or running should be considered...

Malicious code in check-release-dependencies (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9bdeafded5c255c77e197893504e55d7f76cbc76632b83f3b04925c6c6aa970 Any computer that has this package installed or running should be considered...

Malicious code in move-binary-format-wasm (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6e47d2604861aead1b88adc5debb15c733e9012421604524480bc754379a50a Any computer that has this package installed or running should be considered...

Malicious code in flashcards-sdk-converter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8eddf0b4ef4ccf55d3d894db73987fea2f721ef254833426d112e52eb62005bd Any computer that has this package installed or running should be considered...

Malicious code in pegin-address-verificator (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae7230bdf02eee4e5265bcb3025f902011c2de5045bbd1859e4e2d2f655d1e3b Any computer that has this package installed or running should be considered...