Malicious code in @testcarrot/supply (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27e1f69fb6202f5542f7e1a2def95407b079bad5dd22d4ef58c3f243c794000d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @testcarrot/supply1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 517d985985f415a1c4c91f10bdfc1757c72f7331c1f00d61ef96d902603783e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48102 Malicious code in @testcarrot/supply7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b3fc279837edb0be645020c30f0d706a43f965e28e6efef716e2283301fe06e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-27039

Memory corruption may occur while processing IOCTL calls for DMM/WARPNCC CONFIG in Qualcomm chipsets. Affected component: DMM/WARPNCC IOCTL handling. Root cause: memory corruption leading to potential instability (no explicit exploit details). CVE notes MEDIUM severity (AV:L/AC:L/PR:L/UI:N/S:U/C:...

Is your computer mouse eavesdropping on you?

The short answer is: probably not, but theoretically it’s possible. Researchers at the University of California found a method they called Mic-E-Mouse, which turns your computer mouse into a spy that can listen in on your conversations. The method uses high-performance optical sensors in optical...

Malware in redirect-rc2ewa

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in redirect-dravb9

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in redirect-x4imdv

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in redirect-3viu68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 241a41d0003d0cf1fa1c5cc576172322520772e7d459469dcbccf8423132d6f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-f1wut9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40b8c43103721f09fbd0c6ae769a14dac343523d48beb1494a934cafca750a99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-v74zee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00eb82dc8fa348e42a4e1260cd210adb1e29238ba2b0d7035b5e9257cb2038b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-w9cx9u (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82ff558f1e1686cf6046bb0bbed08f411c888a5ec5764fd6f27dc630c6116b5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48059 Malicious code in redirect-ht8x82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 296fb84ab1f2fb5c2b017998f89dde441a49c75b2d4e6849c2ae0a1e422470ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48051 Malicious code in redirect-ci4ynt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6192340fc5c992962663104944e345473999ca164f0e87b9edbc7ec0a6898e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48041 Malicious code in redirect-0g91q6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb8a046d11d2d32600e11bc37ddbb705107cd33d2206e402b33572441677da95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sieve2workers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d53786bf7b79fe2302460c7f8c369195321ca0da5736f4c4da00ca4a42a45529 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mkto-flow-lookup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c904169f3ea79a27da86e03cee022e92ff39831a877f13f17594bfe89ffab7a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48031 Malicious code in migration-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6df2c870c5d08b1672285eb7a008a6c1f960920bf35587f217d96c7f08051a14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48026 Malicious code in concurrent-ruby (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a9a44087853b6fa03aa9a4f09e51ff827a6d90b6fe4da7c38cc6ef2764ad99d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in storefront-search-as-you-type (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0e0258430f6ebc7401b9e28828d8433806e188a230f2a687fa206651d72978c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...