thunderbird: firefox: Cross-process information leaked due to malicious IPC messages

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised process...

thunderbird: firefox: Out of bounds read/write in a privileged process triggered by WebGL textures

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures...

EUVD-2025-105726

Malicious code in dono-ragi93-breki npm...

CVE-2025-11756

Use after free in Safe Browsing in Google Chrome prior to 141.0.7390.107 allowed a remote attacker who had compromised the renderer process to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

How credentials get stolen in seconds, even with a script-kiddie-level phish

This attempt to phish credentials caught our attention, mostly because of its front-end simplicity. Even though this is a script-kiddie-level type of attack, we figured it was worth writing up—precisely because it’s so easy to follow what they're up to. The email is direct and to the point. Not a...

EUVD-2025-68612

Malicious code in oktafian-rendang96-ruro npm...

MAL-2025-76660 Malicious code in transform-es2015-block-scoping (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e96489b1847106951744b2eb46d3c771d38406ff77d148fa97dd349910a934c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tensor-fi-utils-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e019daea1bdfd44c0cf583f38cd83ec5b2073b8b494e8ff91905e0b2f2f88e The package tensor-fi-utils-lib was found to contain malicious code. Source: ghsa-malware...

Malicious code in supports-validation-checkerlib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781852f3dbd6b5aad45817413559a7dece6950db6702bc4d70d20904897bb099 The package supports-validation-checkerlib was found to contain malicious code. Source: ghsa-malware...

MAL-2025-66548 Malicious code in supports-validation-checkerlib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781852f3dbd6b5aad45817413559a7dece6950db6702bc4d70d20904897bb099 The package supports-validation-checkerlib was found to contain malicious code. Source: ghsa-malware...

Malicious code in grumpy-squidward (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e74ed9b405898e2e670d0ae1d0040e8099127e05a3dc50ff19150dd20a290ec4 The package grumpy-squidward was found to contain malicious code. Source: ghsa-malware 54aab923592093f2200b8cd3da7d055731985ce2fd0a384db93136b5277744...

MAL-2025-66545 Malicious code in grumpy-squidward (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e74ed9b405898e2e670d0ae1d0040e8099127e05a3dc50ff19150dd20a290ec4 The package grumpy-squidward was found to contain malicious code. Source: ghsa-malware 54aab923592093f2200b8cd3da7d055731985ce2fd0a384db93136b5277744...

Malicious code in swagger-express-evaluator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b56a0de351341937c692d88411f2d8b6c638192e34d63cef6c3815aa379d278 The package swagger-express-evaluator was found to contain malicious code. Source: ghsa-malware...

MAL-2025-66549 Malicious code in swagger-express-evaluator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b56a0de351341937c692d88411f2d8b6c638192e34d63cef6c3815aa379d278 The package swagger-express-evaluator was found to contain malicious code. Source: ghsa-malware...

Malicious code in vite-plugin-postcss-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4552bafe10098b91c4ce3128c885efb1c472d7f7c18b7bca5d2b174ed097e396 The package vite-plugin-postcss-tools was found to contain malicious code. Source: ghsa-malware...

MAL-2025-66552 Malicious code in vite-plugin-postcss-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4552bafe10098b91c4ce3128c885efb1c472d7f7c18b7bca5d2b174ed097e396 The package vite-plugin-postcss-tools was found to contain malicious code. Source: ghsa-malware...

Malicious code in npmtest_chenguang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f702a0658de936fc3084652027ce0383b048954aef2f39b5783af8edb2e8c7de The package npmtestchenguang was found to contain malicious code. Source: ghsa-malware c6f729e82fdac96b8daaca470b095362e03a02d531c217553f57ffb104cd93...

Malicious code in grid-settings (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b0798fc09c824e110a36baea640ebc023c337f246ab9cc2b6647eb4b9bddad The package grid-settings was found to contain malicious code. Source: ghsa-malware 4461bdacbed2361a56a39a0251d7a47f2454616c944b5380680198ea97f7ef20...

MAL-2025-66541 Malicious code in @walletwave/backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4790acfbb7ffabf95ea0f8d998976b54d8d11ba20b7dd4aa2dcf35b429431a The package @walletwave/backend was found to contain malicious code. Source: ghsa-malware...

Malicious code in @walletwave/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 786e84734b8e7f4af9096790c95dcb0dae82c3364c93e7a2e662c98f3e21e2c6 The package @walletwave/core was found to contain malicious code. Source: ghsa-malware df7464e8000db02c291bbd2af61bdf264c816df679997bf1cefc42d5d4825c...