MAL-2025-5537 Malicious code in @frontend-clients/design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7fe458099d7b7c0662a9f2283b87071d2afc98b120e402fc20ce916a5b5962ff The OpenSSF Package Analysis project identified '@frontend-clients/design-system' @ 10.0.0 npm as malicious. It is considered malicious because:...

Malicious code in pyroscope-nodejs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f63660c0844969995da8de5a83535772031d00f3247e8cbb5a40addbc21a234 Any computer that has this package installed or running should be considered...

CVE-2025-6463

creationtimestamp| type| source ---|---|--- 2025-07-02 08:22:13+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lsxrqhqvcku2 2025-07-02 09:48:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsxwphgtsn2s 2025-07-02 11:41:26+00:0...

WordPress plugin Vikinger 路径遍历漏洞

WordPress Vikinger is a WordPress blog theme developed by a foreign developer. WordPress Vikinger has a path traversal vulnerability that stems from insufficient file path validation in the function vikingerdeleteactivitymediaajax, which can be exploited by an attacker to tamper with the system...

WordPress Vikinger plugin <= 1.9.32 - Authenticated (Subscriber+) Arbitrary File Deletion via vikinger_delete_activity_media_ajax Function vulnerability

Authenticated Subscriber+ Arbitrary File Deletion via vikingerdeleteactivitymediaajax Function vulnerability discovered by Foxyyy in WordPress Theme Vikinger versions = 1.9.32...

GHSA-432R-9455-7F9X

creationtimestamp| type| source ---|---|--- 2025-07-01 19:10:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114779554157879189...

GHSA-XG8H-J46F-W952

creationtimestamp| type| source ---|---|--- 2025-07-01 19:09:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20075 2025-07-01 19:11:55+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114779561289242286...

MAL-2025-5345 Malicious code in github-datasource (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2771dacd93c395c86cb08e3778a5f1003eb477b0338d318b052586d73a90eaae Any computer that has this package installed or running should be considered...

MAL-2025-5344 Malicious code in sdk.babeltest (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb7d26e89ca8ffdb305da3c7bdc066c71640e5a2f046f9172acf6308b4864c9b Any computer that has this package installed or running should be considered...

MAL-2025-5376 Malicious code in category_textured_background (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b79fb63e44acb7b89709ad74956de390dafd2a044dfe4ca90e3759773517a9a Any computer that has this package installed or running should be considered...

CVE-2025-49483

creationtimestamp| type| source ---|---|--- 2025-07-01 12:10:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20020 2025-07-01 12:26:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114777968065544988 2025-07-01 13:08:26+00:00| seen|...

Malicious code in microviewsharedwidgets (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4a0d5ab634b9ee74c4cf591a4cb1b7f151f6f7116e6cd32bcfd80464d278f1df The OpenSSF Package Analysis project identified...

Malicious code in workflows-template (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e1496b26e69a907ccdfa4de45ea382e2c22b156aaa97629f76574f17d12eff2 Any computer that has this package installed or running should be considered...

GHSA-6R2X-8PQ8-9489

creationtimestamp| type| source ---|---|--- 2025-07-01 03:54:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114775953190071346...

Falco 0.41.3

Sysdig Falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco...

MAL-2025-5480 Malicious code in webgl-fingerprinting (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 016147915e679ae2b97b3c040f72eb1171882e3785e1ae3aea0765497138c268 Any computer that has this package installed or running should be considered...

MAL-2025-5399 Malicious code in ee_else_ce (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1573503c97a28616ebbe0ac70f2124f6761b31b0ead756cc1b9e6a9b4a116127 Any computer that has this package installed or running should be considered...

MAL-2025-5407 Malicious code in example-target-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c527df8a6a7f920a0fd9146bf4a738da075f6430ad4a523d1c345fe4deb26b7 Any computer that has this package installed or running should be considered...

Malicious code in @checkbox-technology-pty-ltd/custom-block-kit (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ba31877b88dff4452a6868ad1ecebb0757a820bf7bf3cb5b52205da653a20624 The OpenSSF Package Analysis project identified...

MAL-2025-5315 Malicious code in @checkbox-technology-pty-ltd/custom-block-kit (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ba31877b88dff4452a6868ad1ecebb0757a820bf7bf3cb5b52205da653a20624 The OpenSSF Package Analysis project identified...