MAL-2026-18423 Malicious code in vas-tops2-digital-assistant-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9200deb4c1b7b103f7bfb70a824828ba4a94b5ae4450e6d2379b1edb6ae8162d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vas-tops2-core-property-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b717592099bb17727ccdcad2fb928bf90c9cddaba9439bb084d62b715ed4c605 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in vas-tops2-reportingui

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in vas-tops2-core-clients-search

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in vas-tops2-core-client-cleanup-ui

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in vas-tops2-core-property-search

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-18421 Malicious code in vas-tops2-core-clients-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8f34cc049db12f4eae49cc8977f2d6e09de6f9c7a49e46962f53466fa32122b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18422 Malicious code in vas-tops2-core-property-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b717592099bb17727ccdcad2fb928bf90c9cddaba9439bb084d62b715ed4c605 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18424 Malicious code in vas-tops2-reportingui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba605f5250413f2e4298788eca10f4f24ce20e6f91c6c9f6df3549d147cf6506 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vas-tops2-core-client-cleanup-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d3626e72813ef48b7fa712d21bcfc04b886915dac40f1bf4073caeee0c33be4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vas-tops2-core-clients-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8f34cc049db12f4eae49cc8977f2d6e09de6f9c7a49e46962f53466fa32122b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18420 Malicious code in vas-tops2-core-client-cleanup-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d3626e72813ef48b7fa712d21bcfc04b886915dac40f1bf4073caeee0c33be4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vas-tops2-reportingui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba605f5250413f2e4298788eca10f4f24ce20e6f91c6c9f6df3549d147cf6506 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vas-tops2-digital-assistant-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9200deb4c1b7b103f7bfb70a824828ba4a94b5ae4450e6d2379b1edb6ae8162d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in vas-tops2-digital-assistant-ui

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-18419 Malicious code in vas-tops2-bidmatrix-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4abeeac694ba2d227a41a8e82d0525018201d486e23b94805684af4e07d644d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vas-tops2-bidmatrix-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4abeeac694ba2d227a41a8e82d0525018201d486e23b94805684af4e07d644d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in vas-tops2-bidmatrix-ui

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/vas: Add close callback in vasvmops struct The mapping VMA address is saved in VAS window struct when the paste address is mapped. This VMA address is used during migration to unmap the paste address if the window...

Malicious code in kapvino-sof-vas (npm)

Source: amazon-inspector d22d0f08eee05b41c5123e15694885a807316cda4c4c6d5ef97665602ab3f261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...