Malicious code in node-calculator-fa00 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4262c0c6df0bff5c948bd56a719c0cf2d00aaf9699bb1c4a7367e6054ff72844 The package node-calculator-fa00 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190583 Malicious code in node-calculator-fa00 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4262c0c6df0bff5c948bd56a719c0cf2d00aaf9699bb1c4a7367e6054ff72844 The package node-calculator-fa00 was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198159

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Saysis Computer Systems Trade Ltd. Co. StarCities allows Reflected XSS.This issue affects StarCities: before 1.1.61...

Malicious code in react-svg-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9b392459196e5602d6e40cd38445d10e87e49d85b53b966aee554dd758fc1bd The package react-svg-module was found to contain malicious code. Source: ghsa-malware dd046bd4ddd4da53330303e0802201fda828bce7e1a21524aa7fc0da1fed95...

CVE-2025-12852

DLL Loading vulnerability in NEC Corporation RakurakuMusen Start EX All Verisons allows a attacker to manipulate the PC environment to cause unintended operations on the user's device...

PT-2025-47418

DLL Loading vulnerability in NEC Corporation RakurakuMusen Start EX All Verisons allows a attacker to manipulate the PC environment to cause unintended operations on the user's device...

MAL-2025-190562 Malicious code in node-calculator-3e62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1703fc5c6d064d50b797ea676b0a02186a5cce75afc97191661b8aaa82624543 The package node-calculator-3e62 was found to contain malicious code. Source: ghsa-malware...

Malicious code in node-calculator-3e62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1703fc5c6d064d50b797ea676b0a02186a5cce75afc97191661b8aaa82624543 The package node-calculator-3e62 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190561 Malicious code in mystealer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e07dcc4829f67b5eaf1fb27665849273abb5877ed274a401994d3aa5434ad2e6 The package mystealer was found to contain malicious code. Source: ghsa-malware 7efd023d7730e8b60a68685142e8d643ef789df80050b2138328616ad162387b Any...

MAL-2025-190566 Malicious code in workingstealer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e56b24eb6e9737f361dce6ec109a95d6329de8392f296067cdc01e7f6950ddd1 The package workingstealer was found to contain malicious code. Source: ghsa-malware a5fb745fd37fc6048377cf7a40be4da1bf4751d412c4601909747d7b4ee38bb0...

MAL-2025-190553 Malicious code in multi-provider-settings (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c0e8192bbd1cdf2b9909a202886ff13811a52160d937ae1c0a762a17af288b The package multi-provider-settings was found to contain malicious code. Source: ghsa-malware...

Malicious code in signals-embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d5dc4270646b6f83ba4c0f5f334ec8a5cedd7b16888c9b51a7b3159ddd32ce The package signals-embed was found to contain malicious code. Source: ghsa-malware 9a80ff00c3aa6ab32518f57107ea588aa2da22e76d6db9823783032b89ca146f...

MAL-2025-190506 Malicious code in integrator-2829 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bcecff983d9f430d14498333405f44d090846f460508f71de76679fb2076e9 The package integrator-2829 was found to contain malicious code. Source: ghsa-malware e38f5e4a7250f8d8199f26a59e70750071a304fc729893e38b7074a1cd3ab50...

MAL-2025-190511 Malicious code in signals-embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d5dc4270646b6f83ba4c0f5f334ec8a5cedd7b16888c9b51a7b3159ddd32ce The package signals-embed was found to contain malicious code. Source: ghsa-malware 9a80ff00c3aa6ab32518f57107ea588aa2da22e76d6db9823783032b89ca146f...

MAL-2025-190504 Malicious code in chai-proxify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a90af91a26f042c0ac96b72df310de8ec15f6ab93634ff0547c9efb3e041cd15 The package chai-proxify was found to contain malicious code. Source: ghsa-malware 535f2bd89ddae3ece4cde5060e0e237009d5b0cdef1bce1061a3d420915b2e66 A...

MAL-2025-190501 Malicious code in tailwind-styled-scrollbar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac987129deefb5aef175dc25c742373acfa189bdb1511017f6fff95a99e9ceb9 The package tailwind-styled-scrollbar was found to contain malicious code. Source: ghsa-malware...

Google Chrome < 142.0.7444.176 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 142.0.7444.176. It is, therefore, affected by multiple vulnerabilities as referenced in the 202511stable-channel-update-for-desktop17 advisory. - Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a...

Malicious code in tailwindcss-setflex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d80169fb6c203bac400f4a79925a5a54eef1ef740164552a568e6e6604f9427 The package tailwindcss-setflex was found to contain malicious code. Source: ghsa-malware...

Malicious code in validator-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e37a6017e345fd411d1589cfff26c773d65d94f231505eae6ca3a90b448c4a The package validator-node was found to contain malicious code. Source: ghsa-malware d3f7ef04f70e6978a9f771255f136d634d2907c42c7acf71a42c4c93e7e5d333...

CVE-2025-10495

CVE-2025-10495 affects Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client apps. The descriptions indicate a potential code execution vulnerability that an attacker on the same logical network could trigger under certain conditions. Public details in the provided so...