MAL-2025-1312 Malicious code in bitfinex-production (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3b422cc62c2a37ce694ef5b18ec87c83c4458f5841c731f826b11c19f575bf6 Any computer that has this package install...

Malicious code in mexc-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b22d83fcc93875dbcefd9db5554e0bcab6c594802c953f58ce86d9abeee0838a Any computer that has this package install...

MAL-2025-1304 Malicious code in mexc-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e89e7a3ede2e2c4024150d81c044b9bb69a5f6cb20b0d4c4fb2a000bc7d3ac8 Any computer that has this package install...

Malicious code in mexc-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aab447e6786fd38bfbfa97d8806d9059980107ba328bfce7738f23b885923b02 Any computer that has this package install...

Malicious code in mexc (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1ab8e8fa6e2a60969584718143ce29d6022e75891c0cabb07e2caf8b5a0934e Any computer that has this package install...

Malicious code in mexc-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29d69b3c891155b693e55fbc8734237edcf681cab20168d998375ea5ebdf2de5 Any computer that has this package install...

Malicious code in kucoin-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71c16b2a40914551c9e7bdae7a7e6470a1d514a17dcf036b355f308f456a42bd Any computer that has this package install...

Malicious code in kucoin-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bc6d7a1ad2130468f00ff8d87225df98b3ed6bf45ca9bfb1a4abc0cb86895b3 Any computer that has this package install...

Malicious code in kucoin-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7d98e81b91c8239a7b15024121674428fe1b62d3d9b001b73205b051391932b Any computer that has this package install...

Malicious code in kucoin-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea5c24a4b755eac4753ed0edc8481cffa8c4b84709d5c4e0bcf17871d598cffc Any computer that has this package install...

CVE-2025-25198 mailcow: dockerized vulnerable to password reset poisoning

mailcow: dockerized is an open source groupware/email suite based on docker. Prior to version 2025-01a, a vulnerability in mailcow's password reset functionality allows an attacker to manipulate the Host HTTP header to generate a password reset link pointing to an attacker-controlled domain. This...

Malicious code in kraken-production (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc6bd973c5cb350ae3d0073065c89090053475dbaa60a3513856ed9cf349e47b Any computer that has this package install...

Malicious code in kraken-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de0bd6b283379718c5cc7051d586532589854100e79e3837ef82ba7ccbd61ace Any computer that has this package install...

Malicious code in kraken-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61932b79fa7ada492a4bb1d3351e0d7f98b5b44d86ec407d8fc6fff3067cec00 Any computer that has this package install...

Malicious code in kraken-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 538966bb30335d489eb80b6dad1c7b14ec9a71669fded6c77d31dcb84c13f3d0 Any computer that has this package install...

PT-2025-7054

Name of the Vulnerable Software and Affected Versions: mailcow: dockerized versions prior to 2025-01a Description: A vulnerability in the password reset functionality of mailcow allows an attacker to manipulate the Host HTTP header to generate a password reset link pointing to an...

Malicious code in tokocrypto-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bd84bf796800491cc17e73f69c0e77906f1f66f8c79b2de79967944c97df886 Any computer that has this package install...

Malicious code in tokocrypto (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 140244d36babc85293499ff8089792224b84b05d04c28d8a761e0ffcd67a36d6 Any computer that has this package install...

Malicious code in tokocrypto-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 669fb8f29120a04d7fb997d7f18b5243d5b90b46b614e108e35658c93a0a5e83 Any computer that has this package install...

Malicious code in tokocrypto-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e73822f9506b68dd128d148fa1313d7bdb715b355db849ffdf61be85d1d23ac Any computer that has this package install...