Malicious code in notification-loggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31994ef5ff64a19550b3e145bf17d885b0b7029e463eacfbec340db313a954f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5512 Malicious code in notification-loggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31994ef5ff64a19550b3e145bf17d885b0b7029e463eacfbec340db313a954f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in axios-browseragent

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

kernel: scsi: libfc: Fix use after free in fc_exch_abts_resp()

A vulnerability was found in the Linux kernel's SCSI libfc library in the fcexchabtsresp function, which can lead to a use-after-free scenario. This issue can occur because the function calls fcexchrelease, which decrements a reference count stored in the ep object and then frees the object once...

MAL-2025-5387 Malicious code in cvent-event-calendar (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf244badb700ac9a553a78bc1d00ae8c96e4b9b465c79c5bf09374eb9ef768d3 Any computer that has this package installed or running should be considered...

MAL-2025-5367 Malicious code in bg-core-payments-automation (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7f31e4b1f7d92e4d7eb25476cf6041e8360ea7a50a002ab1311b3629f34c0f8 Any computer that has this package installed or running should be considered...

MAL-2025-5399 Malicious code in ee_else_ce (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1573503c97a28616ebbe0ac70f2124f6761b31b0ead756cc1b9e6a9b4a116127 Any computer that has this package installed or running should be considered...

MAL-2025-5463 Malicious code in sweet-bananas (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3807ab062bdeb965d362dbcd44f72337ba1fe130268e3cae054e1defa1bdf0bc Any computer that has this package installed or running should be considered...

MAL-2025-5505 Malicious code in mod-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13965717642c4230905666118685f8751f2e81b8749c99163d74f840204a3a95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5511 Malicious code in nodyn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66a5bc6552866ebc6dd20133a9dcd39705a9eda32242c6d1c80b8e9b444514aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5518 Malicious code in root-direct (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a3898ab593ffa99617da9a63938d10ebe716d857a81f756bac1b9465911abe2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in viryc-hsc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c7e65fbc4460da9aef8938e77b5ffc7aeb72d879e43d1062a2ebc211d39eed5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5490 Malicious code in canvas-chache-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53cd51cc0d4949d913a5bc2368bc95601e8e8402591ad46084396646e4f75149 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5508 Malicious code in node-pkg-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6df8ca0c98ea357d77cecd453a9b679670af19bad2830fd82ee7cc85813b239c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5510 Malicious code in node-smskc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d3cf92601788898f805df47662f0c0738b1e8e6b89671c98b08fd1c20847922 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodyn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66a5bc6552866ebc6dd20133a9dcd39705a9eda32242c6d1c80b8e9b444514aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in root-direct (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a3898ab593ffa99617da9a63938d10ebe716d857a81f756bac1b9465911abe2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5521 Malicious code in sysframe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8723a89cda98ce8c96a4c09293bc2d707ca721e8a2f72e88f1c54743f14002e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Honor PC Manager security vulnerability

Honor PC Manager is a management software developed by the Chinese company Honor Honor specifically for its computer products such as laptops. A security vulnerability exists in Honor PC Manager version 16.0.0.118, which stems from a misconfiguration of the security properties of the named condui...

MAL-2025-5407 Malicious code in example-target-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c527df8a6a7f920a0fd9146bf4a738da075f6430ad4a523d1c345fe4deb26b7 Any computer that has this package installed or running should be considered...