CVE-2025-27039

Memory corruption may occur while processing IOCTL calls for DMM/WARPNCC CONFIG in Qualcomm chipsets. Affected component: DMM/WARPNCC IOCTL handling. Root cause: memory corruption leading to potential instability (no explicit exploit details). CVE notes MEDIUM severity (AV:L/AC:L/PR:L/UI:N/S:U/C:...

Is your computer mouse eavesdropping on you?

The short answer is: probably not, but theoretically it’s possible. Researchers at the University of California found a method they called Mic-E-Mouse, which turns your computer mouse into a spy that can listen in on your conversations. The method uses high-performance optical sensors in optical...

Malicious code in redirect-w9cx9u (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82ff558f1e1686cf6046bb0bbed08f411c888a5ec5764fd6f27dc630c6116b5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48051 Malicious code in redirect-ci4ynt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6192340fc5c992962663104944e345473999ca164f0e87b9edbc7ec0a6898e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-v74zee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00eb82dc8fa348e42a4e1260cd210adb1e29238ba2b0d7035b5e9257cb2038b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48059 Malicious code in redirect-ht8x82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 296fb84ab1f2fb5c2b017998f89dde441a49c75b2d4e6849c2ae0a1e422470ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48041 Malicious code in redirect-0g91q6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb8a046d11d2d32600e11bc37ddbb705107cd33d2206e402b33572441677da95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-f1wut9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40b8c43103721f09fbd0c6ae769a14dac343523d48beb1494a934cafca750a99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-3viu68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 241a41d0003d0cf1fa1c5cc576172322520772e7d459469dcbccf8423132d6f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sieve2workers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d53786bf7b79fe2302460c7f8c369195321ca0da5736f4c4da00ca4a42a45529 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48031 Malicious code in migration-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6df2c870c5d08b1672285eb7a008a6c1f960920bf35587f217d96c7f08051a14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mkto-flow-lookup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c904169f3ea79a27da86e03cee022e92ff39831a877f13f17594bfe89ffab7a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in storefront-search-as-you-type (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0e0258430f6ebc7401b9e28828d8433806e188a230f2a687fa206651d72978c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48026 Malicious code in concurrent-ruby (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a9a44087853b6fa03aa9a4f09e51ff827a6d90b6fe4da7c38cc6ef2764ad99d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pyjwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1303df275ef90069cbd133d9486d1bd0732a401442c275a2c1ca4765fa940d5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48002 Malicious code in poolcake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bb8f867e9caffbce415671d637f82bc49a3097df8d2cb5c3a41e464419a91e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bildguga (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5232dd55f7737f8e53116826bf0c0e5ba9365eff238e7ba6d86b925d8d12babc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in raydiums1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware caaa5b95641731d67c04f3fd81e8b46d3df55f5408a6388dac6948e16635abbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jupjs1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09dd716116a32a34f5471f21e43619370e7d31e8313b9df22151340041e826f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48010 Malicious code in unitest2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aed7fa383be13086f76d33ea8cf0fb7262464155423ce6c74e8f46c1bf69f6fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...