MAL-2025-5214 Malicious code in lucca-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa129a7dd1ddfa81578c1d0a9cbbdbc772f98c73d3f2f6c55a23c1dadb362038 Any computer that has this package installed or running should be considered...

MAL-2025-5247 Malicious code in hcbridge (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dae688c9eb2cc5ee5f91bb42f486ac35e0601f021e4019a9b671e616c823024 Any computer that has this package installed or running should be considered...

MAL-2025-5212 Malicious code in audible-react-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e390437d447abf7cd857a317c79c2904de3c54d6ad86d8fcd26b65a13ecd6a59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5190 Malicious code in integromat-iml (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6af30570799ed9c117bc1004bec1b6c1a0c75b8a53daa173ecb21f6f8f92216 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5202 Malicious code in postcss-theme-vars (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f769581a5253a548235fa611543497af016d8733ffe11c1f0967ed8e185791e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in next-sweetalert2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8045e5172fb2ccb88fcd16b2a66207ca2896e30031828b942dffcf423ebbb6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in postcss-color-fn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b1cd24ceaf86cd4c6ea692394931ef883d797f87e012ff4ccb60afc7fb8fa5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5200 Malicious code in postcss-layout-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 462502060afb8b130fe73ec2cf8940f9cc7e7d86e3a70ad48606a6b1b4484231 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ati-requisites-form (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d64ef4d7097080d38ce75ebf55cf4aea3bdaeecd2d3fef759558b249ac1abce Any computer that has this package installed or running should be considered...

Malicious code in prior-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c7c6e73e17f87113af9070f3206ac24a1568dbc95820709b46a15a73f4b69dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-auditlog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f572293aa98c3908f745c0548edfb1b2fff98c0f4df1f5e4ba96ec83743d5ae9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @com.att.vstb/vstb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 554029aed2bd3e734c058d64b6b283e3534367b5d8cf1d6162845499091f8ea5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prismicio-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c1c6e5a3123f657ad2ed089a7eae83cd605ab7fb09da62d09d6b7a8b0cc039d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rma-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afd3860d2c559adbec7c4b9f7969ba91923264af177c77229e3f4a50e31f9ac7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5198 Malicious code in pfm-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 166c95fcae61b48f203052e0464f5f7ccfe8df81b02fcd4d12440c0dbcc74893 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fwc-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5660699712881dfe7a83949c97116e726a98d13a948aa245b1b0aebaab71632 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5208 Malicious code in thunderbolt-features-loaders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee3eda7524a24da1ec85916ab8b93146e2e1399af30190b04b9021b0edbf7d61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5205 Malicious code in rma-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afd3860d2c559adbec7c4b9f7969ba91923264af177c77229e3f4a50e31f9ac7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5206 Malicious code in rulai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23e395619a0bca0da893334e671820e1cbb6a2cb16eac6d86adc44b7aec33181 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-26373 · Unknown · Ip Based Login

Name of the Vulnerable Software and Affected Versions: brijeshk89 IP Based Login versions n/a through 2.4.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker ca...