MAL-2025-49253 Malicious code in cordova-plugin-globalization.moment (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 431a9d9edd37d8a5dc80555f3c56e275f5c79162ed66ae419cc7b2450c6ad75c The package cordova-plugin-globalization.moment was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49260 Malicious code in hemi-viem-stake-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1d9184337bc393349d525de921a714d1d1b7d49ccac08cc2d35ff378627971a The package hemi-viem-stake-actions was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49273 Malicious code in ve-hemi-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ce1c8c14c652c22fede3ed26692b173255af2cebbbfe34e91d78ade7b5f9eb The package ve-hemi-actions was found to contain malicious code. Source: ghsa-malware 13edaf6e255d735724b90e45ce9e8ab5c1d6e0f0474ca23ed567341e4a08183...

Malicious code in pixelblm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d62ab0b93a24a50d76861d245aca1b9d067170b8dc681e470fa1c003f2eed10 The package pixelblm was found to contain malicious code. Source: ghsa-malware 2ee65b21f5be8ce779e9dcc8e25883cf38d8856e9c2938e1e9949ad4ea50c111 Any...

MAL-2025-49263 Malicious code in pixelblm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d62ab0b93a24a50d76861d245aca1b9d067170b8dc681e470fa1c003f2eed10 The package pixelblm was found to contain malicious code. Source: ghsa-malware 2ee65b21f5be8ce779e9dcc8e25883cf38d8856e9c2938e1e9949ad4ea50c111 Any...

Malicious code in muleforge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a547ae30a3611da545a607846c864a52e6d4c02c515dc4280b5b74b841c6f8e The package muleforge was found to contain malicious code. Source: ghsa-malware 4337a4cda2c79d821c2425b131f7fbf169472e4b8b4e07a7646ed384cb7a7b2c Any...

CVE-2025-39663

CVE-2025-39663: XSS in Checkmk’s distributed monitoring allows a compromised remote site to inject malicious HTML into service outputs at the central site. Affected versions: Checkmk older than 2.4.0p14, 2.3.0p39, 2.2.0, and 2.1.0 (eol). Root cause: cross-site scripting via trusted/compromised re...

MAL-2025-49362 Malicious code in snavbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5af4f54b61e8c07cb80d8f65c7ff554627597f600fe3b67094eb71097903548 At CLI startup, index.js downloads three native shared libraries sbx.so, bot.so, v1.so from https://$arch.31888.xyz/ amd64.31888.xyz, arm64.31888.xyz...

MAL-2025-49089 Malicious code in operations-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e279a09b8ba965f892f0b7fbae2dd4de1eb039500b8e3e1a52a903298214abef The package operations-packages was found to contain malicious code. Source: ghsa-malware...

Malicious code in operations-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e279a09b8ba965f892f0b7fbae2dd4de1eb039500b8e3e1a52a903298214abef The package operations-packages was found to contain malicious code. Source: ghsa-malware...

Malicious code in esg-odf-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bab458b0a0de6c4110ff28d0306c52de1e31805de0c76f8f188e2c823b28b7 The package esg-odf-common was found to contain malicious code. Source: ghsa-malware 610621a777be160598ba0a95213ed5f2e5645ce0806077fb9f2d1ef65fcdddfb...

MAL-2025-49083 Malicious code in esg-odf-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bab458b0a0de6c4110ff28d0306c52de1e31805de0c76f8f188e2c823b28b7 The package esg-odf-common was found to contain malicious code. Source: ghsa-malware 610621a777be160598ba0a95213ed5f2e5645ce0806077fb9f2d1ef65fcdddfb...

Malicious code in quantum-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 144aa1474c1b5043966e321c81c29f0fae41f764e0948ee5491baa14a08563b1 The package quantum-packages was found to contain malicious code. Source: ghsa-malware 615e247f6ecd82d6ec0aacb0855b7a222aef75c2834a024b3b99ee38c2e7fb...

Malicious code in react-router-dom.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a54a5d0a9e2cbf3435d04524f79602d94e2a8b49ce9bf676ef37f23e44f1c28c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodemonjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29d8b4f06839f74e9f9553ef061c6a797169cecd0b6b28b4ddf1e0fad6252f0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49084 Malicious code in etherdjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d33f9046c1fab70c35f189dec4d15635c281418afb4442a639145fc8e445c97e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in typescriptjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6082397917a827f5633f57e4e1ab18b29257f511ac05859c4c27d6b632fae026 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in etherdjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d33f9046c1fab70c35f189dec4d15635c281418afb4442a639145fc8e445c97e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethesjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea9c413600cb75bea29c7e567157efcaa07b76b9efbb30cb378943bd81eb760e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sort-keys-fix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fd040f6b48ad761cb38f7172921ad9f1a82689c1ac612e6f936271eaf1f08d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...