Malicious code in zuper-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df939c793cc77c055c399930ea5b042f3873bf3e852d94c4c4fcd9388135f0b7 The package zuper-cli was found to contain malicious code. Source: ghsa-malware 303dadde5b88a63ca4d3dd7ef7a5c163dd833cd9505ac628409138e7b4a73401 Any...

EUVD-2025-198759

Malicious code in zuper-cli npm...

Malware in @kvytech/cli

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-190742 Malicious code in @kvytech/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae232c63ad02e601361c2ec6df0ccfc38f274d3a22a1a08a5de3746dbf596c40 The package @kvytech/cli was found to contain malicious code. Source: ghsa-malware a6425961d953e5d0f73300b7a8b700773e9d1adbfc6b1364b3fa1ae59a8d798d A...

EUVD-2025-198785

Malicious code in @kvytech/cli npm...

Malware in zapier-platform-cli

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in zapier-platform-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91585e373be96645e987946f96de5673a2cae4dec8eabdba368acad43399eb55 The package zapier-platform-cli was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190703 Malicious code in zapier-platform-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91585e373be96645e987946f96de5673a2cae4dec8eabdba368acad43399eb55 The package zapier-platform-cli was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198684

Malicious code in zapier-platform-cli npm...

MAL-2025-190660 Malicious code in @asyncapi/modelina-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3144264289038cf791432dc902acf2aafe218ea12a11fd986f2690b63531157 The package @asyncapi/modelina-cli was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198689

Malicious code in @asyncapi/modelina-cli npm...

Malware in @asyncapi/modelina-cli

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @asyncapi/cli

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

EUVD-2025-198691

Malicious code in @asyncapi/cli npm...

Malicious code in @asyncapi/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45b13eec1644f2d38922b7e61732a64ae6ee0d71810232ff15c95a3290de465d The package @asyncapi/cli was found to contain malicious code. Source: ghsa-malware 99e5bdb2a7d429f7e01403c432963826b244c3bed02a5a877ace1307b5fee3ad...

Malicious code in @posthog/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57662af8290901771cf534d8b1ca05ca88dfd84054580144d934f730549a4653 The package @posthog/cli was found to contain malicious code. Source: ghsa-malware e663c40b9060088ff86ea24eec083b9b5bf8afdec2e1963895e47e5177a673d1 A...

Malware in @posthog/cli

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

EUVD-2025-198703

Malicious code in @posthog/cli npm...

MAL-2025-190671 Malicious code in @posthog/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57662af8290901771cf534d8b1ca05ca88dfd84054580144d934f730549a4653 The package @posthog/cli was found to contain malicious code. Source: ghsa-malware e663c40b9060088ff86ea24eec083b9b5bf8afdec2e1963895e47e5177a673d1 A...

Metasploit Wrap-Up 11/21/2025

CVE-2025-64446 - Fortinet’s FortiWeb exploitation A critical vulnerability in Fortinet’s FortiWeb Web Application Firewall, now assigned CVE-2025-64446 CVSS 9.1, allows unauthenticated attackers to gain full administrator access to the FortiWeb Manager interface and its websocket CLI. The flaw...