MAL-2025-4956 Malicious code in owncloud-activity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f185a6ebb16f2c76704506661c022be55d4d5fa2c82397aa60f5ef74cd38f879 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in owncloud-activity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f185a6ebb16f2c76704506661c022be55d4d5fa2c82397aa60f5ef74cd38f879 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4954 Malicious code in plugin-proposal-private-methods (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c0bb5e1a8b40dd1e99594481c6671cd4b01e1864b590ece14a07e6b241af7bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nextcloudpi (npm)

The package communicates with a domain associated with malicious activity...

Social Media Reactions to Open Source Promotions: AI-Powered GitHub Projects on Hacker News

Social media platforms have become more influential than traditional news sources, shaping public discourse and accelerating the spread of information. With the rapid advancement of artificial intelligence AI, open-source software OSS projects can leverage these platforms to gain visibility and...

MAL-2025-5023 Malicious code in aristotle-fetcher (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67dee1184cd446a4663792d8dea9c58c14e9c2b9a64754d639a6af2b8c9dc9c5 Any computer that has this package installed or running should be considered...

MAL-2025-5068 Malicious code in wmreact-p13n (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 814a26626dc52951567560e4f3f5f6854b8ead5b224ec0b06c421df6a0082584 Any computer that has this package installed or running should be considered...

GHSA-7F8R-222P-6F5G

creationtimestamp| type| source ---|---|--- 2025-06-13 20:35:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18339 2025-06-13 21:00:48+00:00| published-proof-of-concept| Telegram/YLjaHgOWqHyGE2pMNrZj7KRcmqTuBmFaJ1673d7IeXnQg 2025-06-13 21:01:34+00:00| seen|...

Malicious code in soufianewldnass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 943431cd355a8b989bd535cb608ec701be5ee1d606e4ecb7bcf010d4b9d3ee69 The OpenSSF Package Analysis project identified 'soufianewldnass' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in maxdome-compute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a03c0986aac72f989f747d0a8145d5753b02543abc7a3d934919e395c825ac42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5053 Malicious code in react-sdk-module-api (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c328baa339da0fb222b6ed839e9e024e3df2427f155e95d650451d9a7c0d49ce Any computer that has this package installed or running should be considered...

Here’s What Marines and the National Guard Can (and Can’t) Do at LA Protests

Pentagon rules sharply limit US Marines and National Guard activity in Los Angeles, prohibiting arrests, surveillance, and other customary police work...

CVE-2025-22241

creationtimestamp| type| source ---|---|--- 2025-06-13 07:28:22+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrhvuir7ylm2 2025-06-13 07:33:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18272 2025-06-13 11:09:00+00:00| seen|...

Malicious code in secure-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 434160e799ebf29235543a4b635db19fbdbe2ed92d2a9fb5e683f7574c9906d4 Any computer that has this package installed or running should be considered...

MAL-2025-5052 Malicious code in react-redux-hydra (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in universal-media-player (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9835fe5dded19e5e333ebb895ef7903763f51f97171c1eef288db9e36495a363 Any computer that has this package installed or running should be considered...

Malicious code in plonkscript-ui-project (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c977dd9beb9d0a79deee319f92b4d206fc255a28241815672b07694561aa6272 Any computer that has this package installed or running should be considered...

Malicious code in passeiaqui (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in mi-permission (npm)

The package communicates with a domain associated with malicious activity...

WordPress History Log by click5 Cross-Site Scripting Vulnerability

WordPress History Log by click5 is a plugin for tracking user activity and logging changes to your website. A cross-site scripting vulnerability exists in WordPress History Log by click5. The vulnerability stems from improper input neutralization and can be exploited by an attacker to execute...