Malicious code in chartable-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b387b9a592b8ed553ec2f990ed3f9cf329be2772c324ac75bd78e6ba9acecfcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cui-travel-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28f2686ec4318061b35e9018872a2a9f3a364c77dcf26ccc1bc405d36475d8fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47472 Malicious code in @cat-ai/assistant-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d4d09d0b50027d4061df3bcfc206f5e4c96c6e1a9f67f5ce3c6e997e91507e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dowload_ebok_voir_grand_by_luc_poirier_bdn67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d72aa930ab4bd1a3165c1c8bd457e5e6c6350f8ead083199565ad6555ed75599 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47481 Malicious code in dowload_ebok_voir_grand_by_luc_poirier_bdn67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d72aa930ab4bd1a3165c1c8bd457e5e6c6350f8ead083199565ad6555ed75599 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47477 Malicious code in dowload_ebok_grundkurs_kunstliche_intelligenz_by_wolfgang_ertel_r9sfy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94e9bffeeffbe35f94a97022a4515f12e36980b5cdb2152202cbe06899ed409a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dowload_ebok_la_tigre_azzurra_by_nicolas_barreau_bkcek (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b5287a522154683f0d46492e8eadd688fe50efe83c0e02bea2c5ad23463eb4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47480 Malicious code in dowload_ebok_see_how_they_lie_by_sue_wallman_7f3za (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fa49dec8d439a9b9749b02cc494c69fbc1a39a7aa95be72aff02ef85608c978 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47473 Malicious code in aot-npm-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 387dbb36bb1161598fbfa2872fbf071892696c3a1df11c616ffa424495bacdb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-34201

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA and SaaS deployments run many Docker containers on shared internal networks without firewalling or segmentation between instances. A compromise of any single container allows direct access to internal services HTTP, Redi...

Malicious code in fast-httpx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43be59be9c0005970f6a8a0cb80767f019ee690c675e81e7a40ed5672a175d64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47465 Malicious code in internallib_v381 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e50fa16b8a33a721efa072a754b6d8bf5c3a9d981f48753a250a77ba202d1cfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47467 Malicious code in internallib_v52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4d4bce17702fd04e9d38d97007a2bc8b4028c77159bcd19e1565f71d7f4ada4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v381 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e50fa16b8a33a721efa072a754b6d8bf5c3a9d981f48753a250a77ba202d1cfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v504 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef29b128600afaa40be1b95115adb2fd455e0f2369a632fffb2af8949124e6c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47457 Malicious code in validator-utils-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fe16686eac8cc9669d7b7cb7b2fb58b8ee27416f8281bf10cabe5710fff4618 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-59417

Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.129.4, there is a a cross-site scripting XSS vulnerability when handling chat message in lobe-chat that can be escalated to remote code execution on the user’s machine. In lobe-chat, when the response from the...

CVE-2025-59417 Lobe Chat Desktop Vulnerable to Remote Code Execution via XSS in Chat Messages

Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.129.4, there is a a cross-site scripting XSS vulnerability when handling chat message in lobe-chat that can be escalated to remote code execution on the user’s machine. In lobe-chat, when the response from the...

Malicious code in storj-satellite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a2cdc91ce66bac3ff8836be68fb784bbdf468eed157c29548ca788ae8669b69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in devextreme-rpk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f74fc68752b93858b4cd802b0c1c9c940779258a08c206b0787ebf5b94bc9738 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...