PT-2025-38232

Name of the Vulnerable Software and Affected Versions: CISA Thorium versions prior to 1.1.1 Description: CISA Thorium does not properly invalidate previously used tokens when resetting passwords. An attacker possessing a previously used token could potentially log in after a password reset...

The vulnerability of the jwt-go library for working with JSON Web Tokens allows attackers to circumvent authentication procedures, thereby allowing them to elevate their privileges.

The vulnerability of the jwt-go library for working with JSON Web Tokens is related to a violation of authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain increased privileges...

Malicious code in capacitor-plugin-healthapp (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ed67ecd3a89635aa7072f0b0399ad7c1fa0f7805c8bbe59b9a775654e5acdab Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @art-ws/prettier (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0ad654106f2b917f883774d7484c2a6e0b8321808a7693b56ce60c52eaf85e3 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @ui-ux-gang/devextreme-angular-rpk (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e5992d6feea9798115c98d409170302c758e89417f30a1fbef8e51a4b48f9a1 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47253 Malicious code in @operato/board (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4316f3e39e55c377e4e12e0dd89c41b61d85b9cdc2c49188568b801ef6b133f Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47287 Malicious code in @tnf-dev/mui (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e45bfa0b3e9c8d62f8156ce36fdba553ac173d52797fe4ddaf4ffd6f447bde4 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @tnf-dev/api (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b9e8e4fdb36ce27b5711a81c3639dcea62b2982fac039847b621e5354efa762 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47305 Malicious code in devextreme-angular-rpk (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48daa4ee53933f4f74c8a6cd7644ad441f316912aa3e282498fe602b91f2bc40 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @yoobic/design-system (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3dc662cb25b7ebe3c1d58e79387906ea93fed4e7034c6e415b1befd1971874a Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @nexe/eslint-config (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28bbd639d7b6ddb2e3b98381bed2e182466ef9c99625b1e1c398cc37ee43f49a Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47339 Malicious code in pm2-gelf-json (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9729db241544847eced07c28de82e8cd2a4432b69f44d56de0289ab621fc1492 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47381 Malicious code in @art-ws/package-base (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83ba9ddbeaff9ca9f10da444f6eebc52dd7ffa99def6e187eab42dac24a4d7de Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47361 Malicious code in wdio-web-reporter (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab54ef5f776b95eb6610135fb736bcc77ce0ed9cc7ec79b805afe3498110fb84 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47294 Malicious code in airchief (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d27bcc3bc35dd516704520eaafbd086947c4ca78d0f28945786da155acc1a73 Any computer that has this package installed or running should be considered fully compromised. All...

BIT-TEMPORAL-2023-3485 Insecure Default Authorization in Temporal Server

Insecure defaults in open-source Temporal Server before version 1.20 on all platforms allows an attacker to craft a task token with access to a namespace other than the one specified in the request. Creation of this task token must be done outside of the normal Temporal server flow. It requires t...

Malicious code in ember-velcro (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb2c22cbb7ab559c0ac1e61418ae224e561beacb9571166240b4c5249a098dbb Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @crowdstrike/foundry-js (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b692cc7f6e5464ffd853e3847c9818751b07e7730ef96f968e01aea83827605f Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in ve-bamreader (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1092696d6fb702fca8cd621a57a61f40b61a7f5574a112b37c87c080ef7f876 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @teselagen/ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63813f363810c8dc88bfa35fbd3a365de9e23c00d5543cee6ef87dfb6e61b5a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...