MAL-2025-48020 Malicious code in @erfix/frontend-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e4b5af69993779ed1984e8970f7b383a3bc21080f172d627bec94a8de475212 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in byted-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cf324dae7bb985ac37aa0fff183e7f60d94c61c8b95b73049e79fcb49a52c27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in adsfasdfadsfasdfasdfasdfsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92de8c9e61414ea48c91c84068563ad7e3458252d2357f0d24eea80deee2a98c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thinhdz-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44556777863f5a5a203a2fbc8aa022cb2316dc0f7bfbbf99ce3efcec63530176 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coninect-flksh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d49aa6dbdeb509506e0e4d551ad3cb4b3560736e769ac94f0ae88ae4bef87df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stanford-arcade (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01c36e4c9cbdde87008fadb366865d34f6b8d7262b00ebf1f526bfad7b2f5d37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in engage-digital-source-server-template-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0c97fe821ca3d5c78fb60b3fe09444c3b2792eba5cbf65779f0b9e8b78cf9c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2018-7988

There is a Factory Reset Protection FRP bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to another smartphone and then perform a series of specific operations. Successful exploit could all...