Malicious code in @walletwave/ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15e6b9673bf6056f0f870d3aa6ad6c4e83ef1a3bf3b58a601dc9cae80d673390 The package @walletwave/ui was found to contain malicious code. Source: ghsa-malware 42ec23f1a72e982a80ced819057ca03a0d26999dc6b7417343456de67a35ec46...

MAL-2025-66547 Malicious code in read-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50e44ff451ef9fc81f95c35723295ddf21c4809772def9f17d454f36060ffa5 The package read-async was found to contain malicious code. Source: ghsa-malware 2425ce18f083d47fb3a3ea1f6f69939c013edff9d27960bac75e225e09d390cf Any...

Malicious code in read-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50e44ff451ef9fc81f95c35723295ddf21c4809772def9f17d454f36060ffa5 The package read-async was found to contain malicious code. Source: ghsa-malware 2425ce18f083d47fb3a3ea1f6f69939c013edff9d27960bac75e225e09d390cf Any...

CVE-2025-12726

Inappropriate implementation in Views in Google Chrome on Windows prior to 142.0.7444.137 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: High...

CVE-2025-12726

Inappropriate implementation in Views in Google Chrome on Windows prior to 142.0.7444.137 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: High...

CVE-2025-12726

Inappropriate implementation in Views in Google Chrome on Windows prior to 142.0.7444.137 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: High...

CVE-2025-12726

CVE-2025-12726 affects Google Chrome/Chromium on Windows with an incorrect Views implementation that allows privilege escalation via a crafted HTML page when the renderer is compromised. Affected versions are Chrome on Windows prior to 142.0.7444.137 (Chromium base). Remediation is to update to C...

Large-Scale ClickFix Phishing Attacks Target Hotel Systems with PureRAT Malware

Cybersecurity researchers have called attention to a massive phishing campaign targeting the hospitality industry that lures hotel managers to ClickFix-style pages and harvest their credentials by deploying malware like PureRAT. "The attacker's modus operandi involved using a compromised email...

Malicious code in chai-as-sorted (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b0a3502254657767ec819133929d33c2b84f1d9607acc89e9557de2b80e9bed The package chai-as-sorted was found to contain malicious code. Source: ghsa-malware 0a769064bb46785af26b5ee4af98633de26f88bcad7b199c113bdf52940e195a...

MAL-2025-55020 Malicious code in reactjs-fabric (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b531a9e3325f1fd726f8701788421a371bdc906c43ce0936034102f34f7d18e8 The package reactjs-fabric was found to contain malicious code. Source: ghsa-malware caed8c64b1139916ddbdb9d303208e80711537ff2e907c8533c12e07ae75cfaf...

Malicious code in reactjs-fabric (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b531a9e3325f1fd726f8701788421a371bdc906c43ce0936034102f34f7d18e8 The package reactjs-fabric was found to contain malicious code. Source: ghsa-malware caed8c64b1139916ddbdb9d303208e80711537ff2e907c8533c12e07ae75cfaf...

Malicious code in le-front-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fdbc40ddfb10ff80c7c6f7a4ef4e08786eaa26459865bfc0e9af58b1cb17e23 The package le-front-monitor was found to contain malicious code. Source: ghsa-malware 0624c63b44959a7b08101b1b63db58d0e06dff2ce6566dcfa5d4e672379a31...

Malicious code in graphhub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f3f531a91594ad386dc82c959af2f53b1e335972b4a7a451fe0184252616c3 The package graphhub was found to contain malicious code. Source: ghsa-malware 4b0d6ee11320721cc3e65d9887c3b251b574bc7e67419fe63dedaa18b15dad9b Any...

MAL-2025-50728 Malicious code in phantom-fixer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12a29d0b7233f4c6d8534448b0202eaddc448817008782120ede8110b31b010d The package phantom-fixer was found to contain malicious code. Source: ghsa-malware 08b29349698428ef5ef1924bece07e739b2c0dc4ee6be172dba838e6c5e4dabd...

Malicious code in react-icons-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224e1d5b1a2b01321da822c843e2013f28320e4b9d4d74487daef59c812557f6 The package react-icons-toolkit was found to contain malicious code. Source: ghsa-malware...

MAL-2025-50727 Malicious code in cursor-bypass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e766d6bd0642a1f0423b016e09152c9fa7f128508c9c6a86ac0745057bd0459 The package cursor-bypass was found to contain malicious code. Source: ghsa-malware 8436dfbf6d130c554b6951669c65c036993527815d340f7b529e3368ed47a7db...

MAL-2025-50731 Malicious code in telegram-travis-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21c0fea0fd00ecd7a983e99a6525746ac36f46a54288cb02a5c9aa852f2d4ac The package telegram-travis-api was found to contain malicious code. Source: ghsa-malware...

MAL-2025-50732 Malicious code in zcash-easy-miner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e47755c29c024cf295a8deba084ae4ecd371b00b9e828f92a588fa5855595351 The package zcash-easy-miner was found to contain malicious code. Source: ghsa-malware 961be38007c4d39afa3574fcfb0b541985648d133866ab95f54133187aa42e...

Malicious code in telegram-travis-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21c0fea0fd00ecd7a983e99a6525746ac36f46a54288cb02a5c9aa852f2d4ac The package telegram-travis-api was found to contain malicious code. Source: ghsa-malware...

Malicious code in cursor-bypass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e766d6bd0642a1f0423b016e09152c9fa7f128508c9c6a86ac0745057bd0459 The package cursor-bypass was found to contain malicious code. Source: ghsa-malware 8436dfbf6d130c554b6951669c65c036993527815d340f7b529e3368ed47a7db...