Malicious code in react-outcome-error-alert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf316b6e96271df51ad30f147aa205bb372c306b2a929a854bafb68c41a5cf88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-33641

Malicious code in mad-3.0.2.2.2.8. npm...

EUVD-2025-33413

Malicious code in redirect-y8p47m npm...

EUVD-2025-33422

Malicious code in redirect-ewce43 npm...

EUVD-2025-33425

Malicious code in redirect-x2giv7 npm...

EUVD-2025-33433

Malicious code in redirect-1wc4gw npm...

EUVD-2025-33440

Malicious code in redirect-e19jye npm...

EUVD-2025-33468

Malicious code in redirect-b9diha npm...

EUVD-2025-33508

Malicious code in redirect-shqv6v npm...

EUVD-2025-33517

Malicious code in redirect-qbzqro npm...

Malicious Package

Overview redirect-mop8sg is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-33535

Malicious code in redirect-gjl674 npm...

Malicious Package

Overview redirect-1knxok is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

PT-2025-41361

Critical vulnerability alert - AWS Client VPN for macOS. Vuln info, including versions and reference links, at SecAlerts: CVE-2021-11462, CVSS 9.3 - https://t.co/8NvHlAebRR ciso cio cto vulnerabilities cybersecurity secalerts msp mssp CVE202511462 awsclient aws https://t.co/RVMw6YoXbF...

MINI-QJM3-49RV-MH76

Bulletin has no description...

EUVD-2025-32935

Malicious code in redirect-aw9itj npm...

EUVD-2025-32940

Malicious code in redirect-ht8x82 npm...

CVE-2011-3171

creationtimestamp| type| source ---|---|--- 2025-10-07 21:02:34+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m2mzldbq652q...

CVE-2025-57564

CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via the /api/logs/insert/elasticsearch/bulk endpoint. This endpoint accepts bulk log data without requiring authentication or input validation, allowing remote attackers to perform...

CVE-2025-40887

A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized data...