CVE-2025-23209

Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. This is an remote code execution RCE vulnerability that affects Craft 4 and 5 installs where your security key has already been compromised. Anyone running an unpatched version of Craft with a...

MAL-2025-5767 Malicious code in clock-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94f232d3ca0a55cee4a30418e75111d62c8ce4b44baa018c72400b9aee310ab4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...