Malicious code in cursor-bypass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e766d6bd0642a1f0423b016e09152c9fa7f128508c9c6a86ac0745057bd0459 The package cursor-bypass was found to contain malicious code. Source: ghsa-malware 8436dfbf6d130c554b6951669c65c036993527815d340f7b529e3368ed47a7db...

MAL-2025-50729 Malicious code in react-icons-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224e1d5b1a2b01321da822c843e2013f28320e4b9d4d74487daef59c812557f6 The package react-icons-toolkit was found to contain malicious code. Source: ghsa-malware...

Malicious code in synqroomkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914da44da2183d035b344098fd0e5fe8c942b80666fa3cbcf855efc2b2239faf The package synqroomkit was found to contain malicious code. Source: ghsa-malware 55bfdc58beccccc6ae0646990cdc186d46c910ef90f5abdcf0c6e4d1d8b52024 An...

Malicious code in dandh811 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19da138a15aafecca5e956762f4d1408b284e452f2afc522d2fe1e8f9549a95d The package dandh811 was found to contain malicious code. Source: ghsa-malware ff1136cf9e4afdd278837f2b23779df88ca82c593d3a3e063dab99161adc3f56 Any...

MAL-2025-49729 Malicious code in dandh811 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19da138a15aafecca5e956762f4d1408b284e452f2afc522d2fe1e8f9549a95d The package dandh811 was found to contain malicious code. Source: ghsa-malware ff1136cf9e4afdd278837f2b23779df88ca82c593d3a3e063dab99161adc3f56 Any...

thunderbird: firefox: Cross-process information leaked due to malicious IPC messages

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised process...

thunderbird: firefox: Cross-process information leaked due to malicious IPC messages

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised process...

CVE-2025-64434

KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.5.3 and 1.6.1, due to the peer verification logic in virt-handler via verifyPeerCert, an attacker who compromises a virt-handler instance, could exploit these shared credentials to impersonate virt-api and execute privileg...

Malicious code in rce-poc-test-honor-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 216f60aec8616ca96e607a879e30241ea807ed24fcb4b775afc5b8ef4d3f4a09 The package rce-poc-test-honor-mcp was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49383 Malicious code in rce-poc-test-honor-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 216f60aec8616ca96e607a879e30241ea807ed24fcb4b775afc5b8ef4d3f4a09 The package rce-poc-test-honor-mcp was found to contain malicious code. Source: ghsa-malware...

Malicious code in xss-payload-7n-ctf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9fcaefcc21332259306a4bbad6a54cda89ef8c6d4874d5176f4bf8f9cb194c The package xss-payload-7n-ctf was found to contain malicious code. Source: ghsa-malware...

Malicious code in xss-payload-all (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c825aada16e0da858a5e9f4b836a1c7a9e4b6e2727d285ff60e8634deb99848 The package xss-payload-all was found to contain malicious code. Source: ghsa-malware bf42864a16e802aec4ff8ec23d71f82c73ac809e44e56a55bcec163b05f539a...

MAL-2025-49384 Malicious code in tailwindcss-aerowind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924018214a3e9174dce76b34435456874d9e4e59b88a5d0e469af8af45d6812c The package tailwindcss-aerowind was found to contain malicious code. Source: ghsa-malware...

Malicious code in tailwindcss-gustify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1671650b65b4934845aada45f513b1bea7032ea94d90f9e1517e60bce563b621 The package tailwindcss-gustify was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49385 Malicious code in tailwindcss-gustify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1671650b65b4934845aada45f513b1bea7032ea94d90f9e1517e60bce563b621 The package tailwindcss-gustify was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49386 Malicious code in tailwindcss-twflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ae450cb567421e91b0d5a8fbe5904a5136ecfcb74a4a78ad0244beac01d011 The package tailwindcss-twflare was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49379 Malicious code in @chatclub/claude-code (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6acfccb78a615c7f037fe5dbd1001d9a77ca4015c89c94122ba5dd78978b66b The package @chatclub/claude-code was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49380 Malicious code in chai-await-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad46eab8b628ea50c737795204bf86f36069b9577310c833ea00a469024ec0b The package chai-await-test was found to contain malicious code. Source: ghsa-malware 47ca275095dc49120d03c89b6b2192f62339069acbd6717fc39d06c04c07037...

Malicious code in chai-await-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad46eab8b628ea50c737795204bf86f36069b9577310c833ea00a469024ec0b The package chai-await-test was found to contain malicious code. Source: ghsa-malware 47ca275095dc49120d03c89b6b2192f62339069acbd6717fc39d06c04c07037...

SUSE CVE-2025-12726

Inappropriate implementation in Views in Google Chrome on Windows prior to 142.0.7444.137 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: High...