Malicious code in mulle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15589f9b2ebb828fe096efdaeef76974f774119ab4db373e4d9d5735399909f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in css-keylogger

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-5683 Malicious code in css-keylogger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d7d5c0eac76577da5186e985efd72018e773d9ada891e44852188b9e5cd8632 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5682 Malicious code in create-app-attachment-github-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c953841a642283b64ae3a2782a5904f4aeb52efcb9b9d091c106ec140f993559 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in create-app-attachment-github-action

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in haha-sana (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d94333a699bc404222efee057cfa9fb0a098160612cbb2f645065f273f841214 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in react-router-scroll-navar

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-5716 Malicious code in phone-mockup-react-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f6a1418f459219963b15e9792b3f8721f33e7d7f3bf802a570652c6f3a5faad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5708 Malicious code in modules9382 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65a087c59c3c0f929ea8866c114728420dfd67459abc44b2ea2830382108127e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5727 Malicious code in scriptstierium11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e266c41818b3bf14da762f866026f1e266e51c7991db31ff0b165c66cd7ba04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5731 Malicious code in sync365 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2003136f074fe6e477c1a6a3458258fb4a9b375093b0520cafc082e4ff537f39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-27058 Buffer Copy Without Checking Size of Input in Computer Vision

Memory corruption while processing packet data with exceedingly large packet...

CVE-2025-27058 Buffer Copy Without Checking Size of Input in Computer Vision

Memory corruption while processing packet data with exceedingly large packet...

MAL-2025-5735 Malicious code in vite-plugin-enhance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8e3c636dfa64944d7dbd44dcd69bf2d040855dec38d508810590f76a1deb54e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5686 Malicious code in elbol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b99a8bf6adb423e7d8328ec1e179ba48ee34d663ab80a55b1c27d156605413f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5706 Malicious code in mark-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d23383a480fcca63e03f17e636f2b8b0ac1605237d730c7ccf159e9ea082f39d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mark-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d23383a480fcca63e03f17e636f2b8b0ac1605237d730c7ccf159e9ea082f39d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cdk8s-kbld (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6be6c2728fc61eee980d78a40e52500b12a5d5c28f128b1fc21a7d18730c806 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in kkyun-xss-payload

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-5704 Malicious code in kkyun-display-flag (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbf5dcd7042eb6d07404348b3566e81d0430bccbe3590ddf39941414f69e4216 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...