Malware in @sev-ui-verse/event-bus

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-47532 Malicious code in @sev-ui-verse/contact-models (npm)

The package @sev-ui-verse/contact-models was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eafe3e022be23739d479cdfe1e577a7e5b593a528063ce67b8fa1beb911fb2e0 Any computer that has this package installed or running should be considere...

MAL-2025-47530 Malicious code in @sev-ui-verse/banking-models (npm)

The package @sev-ui-verse/banking-models was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56743250cac97b219f4137c848e408b6203b996d98ac504aefe79400bed00e37 Any computer that has this package installed or running should be considere...

Malware in @sev-ui-verse/providers

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @sev-ui-verse/authentication

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in giffgaff-help-site (npm)

The package giffgaff-help-site was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d70e7af856cf858476096655334fe528a25eb4262ac3c438c7797794e7ec9bb3 Any computer that has this package installed or running should be considered fully...

MAL-2025-47524 Malicious code in @kahoot-frontend/builder-common (npm)

The package @kahoot-frontend/builder-common was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f53ccdf6a282cfb91d99e8cccd2eea71cc0e2af65b1838e33733b3b872cec92e Any computer that has this package installed or running should be...

Malicious code in @sev-ui-verse/hooks-and-helpers (npm)

The package @sev-ui-verse/hooks-and-helpers was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1049160f2e90aa1d0d8bffb031d38446873f5a0aac9805e51720e06075e0e582 Any computer that has this package installed or running should be...

Malicious code in com.venly.sdk (npm)

The package com.venly.sdk was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 044fdc9512d497cafabbdaca7e90f1a2c45ba0a32c7a14c6e9ac2953a81c61c2 Any computer that has this package installed or running should be considered fully...

Malicious code in x402_monorepo (npm)

The package x402monorepo was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 289e2c6110a91f2ee16f7a0beed85851e59612748773355b6bb90a5b7073ad16 Any computer that has this package installed or running should be considered fully...

MAL-2025-47533 Malicious code in @sev-ui-verse/core-models (npm)

The package @sev-ui-verse/core-models was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 794fcad76f90e38dc1872c555e02d03512701d4d3a3ffc2a932ce9421fa1de97 Any computer that has this package installed or running should be considered...

MAL-2025-47543 Malicious code in @sev-ui-verse/providers (npm)

The package @sev-ui-verse/providers was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27efd3b5904168e110748f7dc2e817324614b5711aae935b5bfacdafe8364830 Any computer that has this package installed or running should be considered ful...

Malicious code in @kahoot-frontend/builder-common (npm)

The package @kahoot-frontend/builder-common was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f53ccdf6a282cfb91d99e8cccd2eea71cc0e2af65b1838e33733b3b872cec92e Any computer that has this package installed or running should be...

Malware in @sev-ui-verse/react-query-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in envs-loader (npm)

The package envs-loader was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94802ccdee601e77ff6361593b03ef5b414dec7eaeccd58d8ed6b2305886b27d Any computer that has this package installed or running should be considered fully...

MAL-2025-47552 Malicious code in dotenvx-config (npm)

The package dotenvx-config was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1b17bc0067221fd1c252545277d6c9462a5c5ef95cfcdf96f7e320699387861 Any computer that has this package installed or running should be considered fully...

Malicious code in internallib_v606 (npm)

The package internallibv606 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b6c06c560ee88f500df3ba003383f74ab623b5238ca2ac63523d552673de2bd Any computer that has this package installed or running should be considered fully...

Malware in igame

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2025-10829

A vulnerability was detected in Campcodes Computer Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/supedit1.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public...

SQL Injection Vulnerability in Computer Sales and Inventory System (CNVD-2026-38219)

Computer Sales and Inventory System is an open-source inventory system for computer sales developed by CampCodes Corporation. The Computer Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameters of the...