MAL-2025-223 Malicious code in prem-bot-convo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cd47585859b799eb8fb019210456a4cfd1f1e439e305455338438c8e21be566 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-238 Malicious code in selectkit1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d1e92cc92e640c0bf6819b70d715c79a4367d8a82101409a67189bc33c67ad4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-246 Malicious code in ssb-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44300dee438c70b095b042f4a1afc1779cec04cb569698b2622ccbae1a045f05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-127 Malicious code in hello-hamid-world-npm-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 539c20029ec03b9e0b517324e4c69c8223fb3353722028788169d41256d1ef80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in swisscom-scaleio (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c56983709f53a43b82244bcb874d8ee94f893ad1f3c90d2bb0c4e875d5bb97b Any computer that has this package install...

MAL-2024-12149 Malicious code in js-dos-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d534d9ec05d6809f40b3db232c0e24e612234ca30b7d46155b7aa6043c7d02a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @add-wallet-exchange/import-type (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 009dc7d5e85690b3a1fdfe88879a357c8277b755a5983e5e9bcadf1e2624af1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12021 Malicious code in playwright-1.48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c425d60dd5426771b56cc598b6cb55fffa7b0444728b06e2d6126389582b0707 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11976 Malicious code in eritiopitop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d15b644f2a4d79a062d6c3a7af975bc368236569d54382196034bcb9a8f42938 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12007 Malicious code in my-app-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3b688286528def3945fc6d678e314a2678fdddd35def920c64e4c311a29d416 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11903 Malicious code in hackbro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc47c5f305fc03f562acfd324aa89273fb66507dc4c37bef544dec43fe8ef5c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testin-elengos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8b81d93eabbd732b074f3694f5d0bd4969f90c18eceb07c91c188cba1f26b5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rudije (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcdd046bf1e56d4d7e470f97bf73aba4e564024ec6a89b1493ffc7d5c5a7101c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in assetmantle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25dddd918f13d7e544f8d420513711de48ce49d7c545668b49d312d4054ff4f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ubuntu 14.04 LTS : Linux kernel vulnerability (USN-7122-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-7122-1 advisory. A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following...

Malicious code in listing-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9721f8e927e787ea57b202a8a5b29ab1fd0cd530861055ad6a3e36a1c0df8d9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Java(Script) Drive-By, Hacking Without 0days

A remote code execution chain in Google Chrome, which allows an attacker to execute code on the host machine, can cost anywhere from $250,000 to $500,000. Nowadays, such powers are typically reserved for governments and spy agencies. But not so long ago, similar capabilities were accessible to th...

Malicious code in ganach-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73d3e3f61f335dc7d34337825d521731cfa9030c28efb0b1dc3c13cba719d89b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10436 Malicious code in puppeteerwweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cb0748b32f74311c6685d9f83b7f96d02b87da7abe76eddbf2f3d787179eb97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10341 Malicious code in puppeteer-extra-stealth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b37fbc6ab229a243ce69502d1a45b114b8b4c6318a961389367378d664f35b03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...