MAL-2026-18257 Malicious code in insta-api-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6451b5d95d51aa4063e15551a18c1305088f92597bf3a7e47bd18472a81d9855 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview ionic-tiktok-scraper is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview insta-api-wrapper is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-18263 Malicious code in ionic-youtube-streams (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c551ccf6ad7f2689c8e83cd054ea50278c224f50d1f37dc0285a3da31331dbd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18262 Malicious code in ionic-youtube-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c081308db3c1e903e04a99672621d70a549e82da4baa7e7624d3960048d93e63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18259 Malicious code in ionic-insta-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 407c310ce45465666130259c09efcd3fbcb31a3d0173587bd2c4db6a078cc70a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18256 Malicious code in cordova-plugin-geofence-appit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d6df6a389ad760629032dd0d4208662693ac60ebca2ff2b53ffbdf5f464387a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18254 Malicious code in appit-cordova-plugin-ionic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ca4bb7b12ff9e72819f551c8252a855a7500368c07445e10661aa67cd7792c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18253 Malicious code in appit-cordova-admob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c43e8d1cd94e817a763aa22f3edb86e232a3c4ca467af0c8d77cda9b3b03c3d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18270 Malicious code in youtube-search-without-api-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64255a9b30bfd083ac86612f2d7307de45dc83a57c42caf459cfb8df21dc2bf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18269 Malicious code in youtube-info-streams (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d38f2ba6def3a037f621b617a0823144c52043e6adc1b22f2e81eb7aafc5ae11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18266 Malicious code in redis-dumper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c3ee8b960cc4d59eff195c1ddc79224b61178479a16026c47dc5cb79cb93cbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18264 Malicious code in ocsp-hashes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5167b67fd13cd4c8c6f63298909e9e4b532cae03035e5158629eaaa355cc540 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ocsp-hashes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5167b67fd13cd4c8c6f63298909e9e4b532cae03035e5158629eaaa355cc540 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18265 Malicious code in p12-pem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c50c1679b0617ad231d0e8aaf2c111ab57f909dff3af9e1b628169aba167381 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18255 Malicious code in cert-infos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9c8351a95953b95817bd6cc206618cfb83676e664b8ea2d67035b17ddb21079 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in p12-pem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c50c1679b0617ad231d0e8aaf2c111ab57f909dff3af9e1b628169aba167381 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-25747-HotelDruid-3-0-7-Reflected-XSS

CVE-2025-25747 - Reflected XSS Vulnerability in HotelDruid 3.0.7 Description Cross Site Scripting vulnerability in DigitalDruid HotelDruid v.3.0.7 allows an attacker to execute arbitrary code and obtain sensitive information via the ripristinabackup parameter in the creabackup.php endpoint Severi...

CVE-2025-4336

eMagicOne Store Manager for WooCommerce 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo...

CVE-2018-7600

Proof-Of-Concept for CVE-2018-7600 / SA-CORE-2018-002 codebeat badge Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations. H...