libvpx: Double-free in libvpx encoder

A flaw was found in libvpx. A double-free issue can occur in vpxcodecencinitmulti after a failed allocation when initializing the encoder for WebRTC. This can cause memory corruption and an exploitable crash...

MAL-2025-4991 Malicious code in azure-pipeline-filter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ccebaffafad34dc6e0db144fad37c055332951b9590769cbc852f2141a08d5a Any computer that has this package installed or running should be considered...

Malicious code in eslint-plugin-panel-ops (npm)

Malware: Executes code on install, exfiltrates data via DNS to a suspicious domain. Contains a preinstall script and phone-home behavior. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc1ea7508e63005e73356cfdb457f0050ebb7ae1f04cb319592c30a140c4e2f2 Any computer th...

libvpx: Double-free in libvpx encoder

A flaw was found in libvpx. A double-free issue can occur in vpxcodecencinitmulti after a failed allocation when initializing the encoder for WebRTC. This can cause memory corruption and an exploitable crash...

The vulnerability of the “Termide Virtual Desktops Connection Monitor” software agent stems from the lack of protective measures for the request structure, allowing a hacker to intercept the IPC socket.

The vulnerability of the “Termide Virtual Desktops Connection Monitor” software agent is related to the lack of protective measures for the request structure. Exploiting this vulnerability allows a remote attacker to intercept the IPC socket...

Malicious code in client-vue3-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 949b1148db60c58f37c8fec03067aa1974329c0f5719de4425b8840f213b5f2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in arc-offsec-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10c818d61d5a433e8603351eaeaa1329d8a7365d5c6b8497143cf7c8e5c1f9f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4966 Malicious code in zxdb (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b6e6fbdc6289a7a4946e72303aaeb98c9b837470df312ade4e634a7fa81fa52 Any computer that has this package installed or running should be considered...

Malicious code in zora1abs-protoc-helper (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32798df02edd137f9c9492f0b336887efd45c7af6f15e4bac809b1e107d7b4bd Any computer that has this package installed or running should be considered...

Malicious code in zora-exploit-payload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a09d84c94c165c768d88481e00efa77860f1237a66dc441e253dd480f1e476a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in owncloud-activity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f185a6ebb16f2c76704506661c022be55d4d5fa2c82397aa60f5ef74cd38f879 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-49183

All communication with the REST API is unencrypted HTTP, allowing an attacker to intercept traffic between an actor and the webserver. This leads to the possibility of information gathering and downloading media files...

Malicious code in plugin-proposal-private-methods (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c0bb5e1a8b40dd1e99594481c6671cd4b01e1864b590ece14a07e6b241af7bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5045 Malicious code in nextcloudpi (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in nextcloudpi (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in natumatu (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in aristotle-fetcher (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67dee1184cd446a4663792d8dea9c58c14e9c2b9a64754d639a6af2b8c9dc9c5 Any computer that has this package installed or running should be considered...

MAL-2025-5061 Malicious code in station-signal-client-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50bb4c06916b1308d0186e91da66bc27ce6eae2bb1c0f584bca6282ad55bf3c5 Any computer that has this package installed or running should be considered...

MAL-2025-4952 Malicious code in eyeblue1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d152785a33262aef07792faf0e6affc3c4b0272ea937b56cb3707f5e4286b9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4950 Malicious code in maxdome-compute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a03c0986aac72f989f747d0a8145d5753b02543abc7a3d934919e395c825ac42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...