MAL-2025-5058 Malicious code in secure-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 434160e799ebf29235543a4b635db19fbdbe2ed92d2a9fb5e683f7574c9906d4 Any computer that has this package installed or running should be considered...

MAL-2025-5063 Malicious code in universal-media-player (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9835fe5dded19e5e333ebb895ef7903763f51f97171c1eef288db9e36495a363 Any computer that has this package installed or running should be considered...

Malicious code in universal-media-player (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9835fe5dded19e5e333ebb895ef7903763f51f97171c1eef288db9e36495a363 Any computer that has this package installed or running should be considered...

Malicious code in react-card-security-code (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1ee206260c832fcc9736dc58bdd69c339579082e7216fd531b76689c04730e5 Any computer that has this package installed or running should be considered...

MAL-2025-5054 Malicious code in recoil-handler (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @jito-lab/provider (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in dep_test_for_mal (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5031 Malicious code in dep_test_for_mal (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in cycle-a (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5030 Malicious code in cycle-a (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-22251

An improper restriction of communication channel to intended endpoints vulnerability CWE-923 in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an unauthenticated attacker to inject unauthorized sessions via crafted FGSP session synchronization...

CVE-2025-49194 Unencrypted communication

The server supports authentication methods in which credentials are sent in plaintext over unencrypted channels. If an attacker were to intercept traffic between a client and this server, the credentials would be exposed...

CVE-2025-49194 Unencrypted communication

The server supports authentication methods in which credentials are sent in plaintext over unencrypted channels. If an attacker were to intercept traffic between a client and this server, the credentials would be exposed...

CVE-2025-49194

CVE-2025-49194 affects SICK Field Analytics and SICK Media Server. A root cause is support for authentication methods that transmit credentials in cleartext over unencrypted channels, enabling potential credential disclosure if traffic is intercepted. Public documentation from multiple sources co...

CVE-2025-49183

All communication with the REST API is unencrypted HTTP, allowing an attacker to intercept traffic between an actor and the webserver. This leads to the possibility of information gathering and downloading media files...

CVE-2025-49183 Unencrypted communication (HTTP)

All communication with the REST API is unencrypted HTTP, allowing an attacker to intercept traffic between an actor and the webserver. This leads to the possibility of information gathering and downloading media files...

CVE-2025-49183 Unencrypted communication (HTTP)

All communication with the REST API is unencrypted HTTP, allowing an attacker to intercept traffic between an actor and the webserver. This leads to the possibility of information gathering and downloading media files...

CVE-2025-49183

CVE-2025-49183 affects SICK Field Analytics and SICK Media Server. Root cause: unencrypted REST API communications over HTTP allow an attacker to intercept traffic, enabling information gathering and potential media-file downloads. Impact is described as confidentiality concerns (information disc...

MAL-2025-4932 Malicious code in uniswap-v4-scratchpad-poc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01754c5d133c195a4c109504b5db8355893e90a308a2317d421d8f2d034cad23 Any computer that has this package installed or running should be considered...

CVE-2025-35978

Improper restriction of communication channel to intended endpoints issue exists in UpdateNavi V1.4 L10 to L33 and UpdateNaviInstallService Service 1.2.0091 to 1.2.0125. If a local authenticated attacker send malicious data, an arbitrary registry value may be modified or arbitrary code may be...