12999 matches found
Malicious code in zora-exploit-payload (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a09d84c94c165c768d88481e00efa77860f1237a66dc441e253dd480f1e476a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in owncloud-activity (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f185a6ebb16f2c76704506661c022be55d4d5fa2c82397aa60f5ef74cd38f879 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-49183
All communication with the REST API is unencrypted HTTP, allowing an attacker to intercept traffic between an actor and the webserver. This leads to the possibility of information gathering and downloading media files...
Malicious code in plugin-proposal-private-methods (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c0bb5e1a8b40dd1e99594481c6671cd4b01e1864b590ece14a07e6b241af7bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5045 Malicious code in nextcloudpi (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in nextcloudpi (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in natumatu (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in aristotle-fetcher (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67dee1184cd446a4663792d8dea9c58c14e9c2b9a64754d639a6af2b8c9dc9c5 Any computer that has this package installed or running should be considered...
MAL-2025-5061 Malicious code in station-signal-client-lib (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50bb4c06916b1308d0186e91da66bc27ce6eae2bb1c0f584bca6282ad55bf3c5 Any computer that has this package installed or running should be considered...
MAL-2025-4952 Malicious code in eyeblue1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d152785a33262aef07792faf0e6affc3c4b0272ea937b56cb3707f5e4286b9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4950 Malicious code in maxdome-compute (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a03c0986aac72f989f747d0a8145d5753b02543abc7a3d934919e395c825ac42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5058 Malicious code in secure-lib (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 434160e799ebf29235543a4b635db19fbdbe2ed92d2a9fb5e683f7574c9906d4 Any computer that has this package installed or running should be considered...
MAL-2025-5063 Malicious code in universal-media-player (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9835fe5dded19e5e333ebb895ef7903763f51f97171c1eef288db9e36495a363 Any computer that has this package installed or running should be considered...
Malicious code in universal-media-player (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9835fe5dded19e5e333ebb895ef7903763f51f97171c1eef288db9e36495a363 Any computer that has this package installed or running should be considered...
Malicious code in react-card-security-code (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1ee206260c832fcc9736dc58bdd69c339579082e7216fd531b76689c04730e5 Any computer that has this package installed or running should be considered...
MAL-2025-5054 Malicious code in recoil-handler (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @jito-lab/provider (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in dep_test_for_mal (npm)
The package communicates with a domain associated with malicious activity...