MAL-2025-3714 Malicious code in crisp-import-conversations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 695e694069b00b1d669921e34a38537e57d625a52cebab80f5ae8af1221b8377 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ui-platform-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8e52fc989383c2ba9b074173be333530aa86b44f1fa38e4a7b156ab1bc4fc6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in component-modernizr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d129d7d7e1054353b2ec57d812f644c8d4fbcbc5ad054685eff845776516d1ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3587 Malicious code in swap-subgraph (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc32db990bb425f3c32c2f312da5d2e3315f210e4aa1cc342f3df5c3827f6fe5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3577 Malicious code in bffhfuruhejfhdj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 298612b0f8a60cff6f0e77495a9c7fbac0f7b5ebd47ed47eccd75917a0196972 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3579 Malicious code in fiddlesticks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec30bd6c3d5aa70760612fa335f9e4a9cf16de77eabb7dc0dc80cdcd61bc93bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sxg-playground (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b828cf00dda5e1da028ac7d8fa869413fb2e4b7592b0ae416d651ae839ca2704 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bffhfuruhejfhdj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 298612b0f8a60cff6f0e77495a9c7fbac0f7b5ebd47ed47eccd75917a0196972 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3582 Malicious code in passkeys-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10656f77a1b38bf858443c5f4372da8b3a88fc8685d6750ebb92f8b6d6ecde2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3583 Malicious code in selfbot.js-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbdd8332c80f739c8bf3a99e9f32609e53a108f2f7eea79c12d65a8af551c280 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vanjavajs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a8417f1ff2ac3cbdce79373e2e75ebb7a69e5c4e64fdffb9627ebd274a15dfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in socket-event-trigger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84c96a1eba1263914947232b5710b1f74986be68b124fefcbd733643ddd31c47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3580 Malicious code in mongo-errorlog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e32915bf4c99db1cb294f47f98fa059abf22bbbb6729673f93f8370a0b9882e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in serverlog-dispatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6dcf491363258b87486dab0c11447d6bfd9cc41eda8ced61c5eaa12f683d688 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56ca9dc73ad1724cba2621975411cb4f207c06e1526426ef7e257b805ac42800 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3581 Malicious code in next-log-patcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfce41719d550a7097080921b8d71c939042745806269bbd66ba0e2033dee574 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-32883

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-41722. Reason: This candidate is a reservation duplicate of CVE-2024-41722. Notes: All CVE users should reference CVE-2024-41722. instead of this candidate. All references and descriptions in this candidate have been removed ...

CVE-2025-32885

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The app there makes it possible to inject any custom message into existing v1 networks with any GID and Callsign via a software defined radio. This can be exploited if the device is being used in an unencrypted...

Malicious code in minicom-support-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fe5a32eef884912d0aef63ac3eaee111adfe5f86d5aa4b762a728f9d6f8c7e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3567 Malicious code in array-length-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1eeb8fbe13dcffd2d78c2677d8add867f32dd32725416d8f2f71ff2df0ba6f62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...