Malicious code in ltiditest2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83fb4582ce1cfad526a2d45083d7e6199fed61f683196be2584060c68bcbf822 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aspnet-asset-management (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 068ec09bafae1223e1ebcc83c97b674b7188dd9ca13b5b73d241bccad793bf88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5861 Malicious code in aspnet-asset-management (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 068ec09bafae1223e1ebcc83c97b674b7188dd9ca13b5b73d241bccad793bf88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ultraconvert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e05cf9459694fac15785e7fdcb157daa4fe5d8a7026e9f6e67ba6873a0ec3ad5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5865 Malicious code in ultraconvert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e05cf9459694fac15785e7fdcb157daa4fe5d8a7026e9f6e67ba6873a0ec3ad5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5989 Malicious code in target_user_list (npm)

The package communicates with a domain associated with malicious activity. It exfiltrates user data via wget in preinstall and test scripts. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccbd7ef3804411c704a4a194010ead12c2e4f14bb09c560be7a4a4c5269e9dbb Any computer...

Malicious code in flow-playground (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14d20a3a54d31a33e86fe7ad68eddc9fbfb2b2d94bc3787b6d963b290d2fbdde Any computer that has this package installed or running should be considered...

Malicious code in fxa-auth-server (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 001dcafa5fa85d6d5358a1a79909f92615e17cae27329f2b1fea9c1cc51d41ca Any computer that has this package installed or running should be considered...

MAL-2025-6089 Malicious code in fxa-auth-server (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 001dcafa5fa85d6d5358a1a79909f92615e17cae27329f2b1fea9c1cc51d41ca Any computer that has this package installed or running should be considered...

Malicious code in dom-navigation (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c04a85ac6aa223bac4b94bab32834c067d4bcec58ef085965d4a856eb46903ed Any computer that has this package installed or running should be considered...

MAL-2025-5984 Malicious code in @3kali182/selenium-webdriver4 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bff78cc4315b550d5909b8c816e780ca2f8d9a2faf17fcf35ec85eecdec84644 Any computer that has this package installed or running should be considered...

CVE-2025-52988

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the CLI of Juniper Networks Junos OS and Junos OS Evolved allows a high privileged, local attacker to escalated their privileges to root. When a user provides specifically crafted argument...

MAL-2025-5833 Malicious code in coverage-v8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f834a92fcc0d512c74e8e4a449bb0b3fbd2f2e7d6718bf86996721c2adc1457 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5791 Malicious code in preset-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e3a5769ecfa64cabb03e45079fe53e40fc3c3db25ea4848c217397abde544a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in preset-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e3a5769ecfa64cabb03e45079fe53e40fc3c3db25ea4848c217397abde544a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5774 Malicious code in dtcp-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d6735c1027226ecf96f1649634b0f5e6177c10f5cd381586d03cd9f38015d68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in esign-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95776f5b7e274091b8f6f9a4fb620ad2a23f0b693413005faec7c8d348f97a21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rita-remoteista (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ae4e995a07a4d4dde2738ea6213c272990a85dd9d4f6f3ff92eaff2cefd021b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grallama (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9a320b2690b732632ebf0fc3d95fb5e7b73a3da0fa8a36714880645805464c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hubspot-cms-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb6184defa0162c7c46179a4c0e85e5df794bc2fadb23f9649184487324684b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...