MAL-2025-4727 Malicious code in ach-spa-facephi (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd75f718721082889a41c284f8f6a36bc2940f0041d4ff2257a7065e040b7d9c Any computer that has this package installed or running should be considered...

MAL-2025-4917 Malicious code in ac-mvc-data-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 169e9462eb068cce8b3da98f703f0be4a19c54ddaf088f9b6f23613ec34adbaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4705 Malicious code in launch-darkly-provider (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6696ff99444d08a99f63e53ce846b37cf11486968604779920e29d8ca0185d08 Any computer that has this package installed or running should be considered...

Malicious code in launch-darkly-provider (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6696ff99444d08a99f63e53ce846b37cf11486968604779920e29d8ca0185d08 Any computer that has this package installed or running should be considered...

MAL-2025-4706 Malicious code in virtru-design-params (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c17dc3a9d15ee9a1acba1ea2eac04dd9544e09908d2014fcb8b9c689ba07c29 Any computer that has this package installed or running should be considered...

Malicious code in stake-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 505bc2ea5f7bcdaeafd338ab86be15a36425335f5d45c1b2d5d03d43068ab07f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4697 Malicious code in dc-spectrum-v3-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f90b2269a7759d64a1656b51e7f35e99c4005a61cd9012d931d6965bd544aa1 Any computer that has this package installed or running should be considered...

DoJ Seizes 145 Domains Tied to BidenCash Carding Marketplace in Global Takedown

The U.S. Department of Justice DoJ on Wednesday announced the seizure of cryptocurrency funds and about 145 clearnet and dark web domains associated with an illicit carding marketplace called BidenCash. "The operators of the BidenCash marketplace use the platform to simplify the process of buying...

MAL-2025-4701 Malicious code in bu_account_js_sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc62579251997ba805a1917e4c99f877f16b19a293c2c910ff35fac17606a1d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fluent-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbb5610bb518e5c4fa725a7a45bc66deb3ac1eec573f9b182d25cd20e93d5295 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4735 Malicious code in conventional-changelog-action (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 824c344ea468bb338b2b69885de649068ca830ed86879b6b8d0142a646097470 Any computer that has this package installed or running should be considered...

Malicious code in @sasmeee/ip-locator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3d296c24cd25db1d2f169b181325894d8d6331e3e3aa4e4f3014b8f3b40a56f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4672 Malicious code in @sasmeee/demoupload2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 010f01398a3d762a2f78d4620f4495c5cf865adc1d236a2c1b5f637a8429cf18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4673 Malicious code in @sasmeee/gamble (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c87f47f35d7c73fd035a897353adf49aa127f906c05e5bb8ffa791b9465d8f71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4757 Malicious code in pizza-delivery (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32883280f27dee6f08c25f84fa750e17fad3b3193488b14da6a77cddf52ef582 Any computer that has this package installed or running should be considered...

MAL-2025-4764 Malicious code in sechub-web-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f65f37c0cf500f985994b4ab4d2cc764e8072e70cc17aab91987e239129fa93 Any computer that has this package installed or running should be considered...

MAL-2025-4736 Malicious code in copy-package-contents (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 219b6f163c59d78fd936297643511fdfb25a63f8ed99ce66949104cdf17efcad Any computer that has this package installed or running should be considered...

CVE-2025-1701

CVE-2025-1701 affects MIM Admin Service prior to 7.2.13, 7.3.8, or 7.4.3. The issue allows a local attacker with access to the RMI interface (bound to 127.0.0.1) to send a specially crafted request and execute arbitrary code with the privileges of the MIM Admin service. The RMI surface is locally...

MAL-2025-4690 Malicious code in nethereum-helper-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1113e69bfa84d519a1db8e7d38e9f66170f41d55f60398de2f057c298838d76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nethereum-helper-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1113e69bfa84d519a1db8e7d38e9f66170f41d55f60398de2f057c298838d76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...