MAL-2025-5518 Malicious code in root-direct (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a3898ab593ffa99617da9a63938d10ebe716d857a81f756bac1b9465911abe2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5511 Malicious code in nodyn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66a5bc6552866ebc6dd20133a9dcd39705a9eda32242c6d1c80b8e9b444514aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5505 Malicious code in mod-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13965717642c4230905666118685f8751f2e81b8749c99163d74f840204a3a95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5521 Malicious code in sysframe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8723a89cda98ce8c96a4c09293bc2d707ca721e8a2f72e88f1c54743f14002e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Honor PC Manager 安全漏洞

Honor PC Manager is a management software developed by the Chinese company Honor Honor specifically for its computer products such as laptops. A security vulnerability exists in Honor PC Manager version 16.0.0.118, which stems from a misconfiguration of the security properties of the named condui...

MAL-2025-5407 Malicious code in example-target-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c527df8a6a7f920a0fd9146bf4a738da075f6430ad4a523d1c345fe4deb26b7 Any computer that has this package installed or running should be considered...

MAL-2025-5460 Malicious code in sizings (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 393af076bb3b03dbc0a98992d0876a85e7b2cea1450e48e012de0ba71943f8b5 Any computer that has this package installed or running should be considered...

MAL-2025-5433 Malicious code in mapbox-gl-js (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ada891fdc8acdf8af20afcf9782848cf7cf035176b623fdf8c82a3b046d43005 Any computer that has this package installed or running should be considered...

MAL-2025-5412 Malicious code in govuk_frontend_alpha (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aaaf365f7859857e3e00a40b24b6c5c83485edea64290455cece2610cca84bc1 Any computer that has this package installed or running should be considered...

MAL-2025-5402 Malicious code in epic-mw (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6537e833320c30d33c6e8b2c61927748ebe0fc1066a6b60415d10c2d2470f7c Any computer that has this package installed or running should be considered...

MAL-2025-5396 Malicious code in dynamic-target (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb117b6b1845227fbb96ae7be9dce72567b6a74510e9d7e2bd415aa38d2685dd Any computer that has this package installed or running should be considered...

MAL-2025-5447 Malicious code in online-learning-translations (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 868acedaa0c2050db6943bc3a4a1b309e10110417f79ea031b8b01107f4fc599 Any computer that has this package installed or running should be considered...

Malicious code in bootstrap-modules (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a45d845a42d64eb0f9732d82ec558f52eed95f2e905ffec7f0ae2849f78104e1 Any computer that has this package installed or running should be considered...

MAL-2025-5462 Malicious code in styled-components-react18-v5 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66d52b4bf89a840fc85060c046eff8faa5d258a0e3d47a52abf3c7b522ca1762 Any computer that has this package installed or running should be considered...

MAL-2025-5285 Malicious code in react-plaid-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2e5a7cd6740a8b92b5b0c681bce252fd1850ace8501de899aea496321176c95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5289 Malicious code in sumsub-node-websdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0f130a771df580704e11f7b16a38ff74d7630406d6acd868819477435c331e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spoofer-ip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2da3af6f33c88ebffe3e46690a63880708c162a1c710ff72131cf99f3ead9674 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rush-sdk-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fa10be10595dcaddcd28ad64cd62ae55a44b7354d6bb1de952adc3cdc5b5c89 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5286 Malicious code in rush-mcp-example-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4593979eeb7174aea0989af27a63ee606786e382185ca406a15e9d4368c687b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Canon EOS Webcam Utility Pro for MAC OS 安全漏洞

Canon EOS Webcam Utility Pro for MAC OS is a software designed for Canon cameras by Canon Japan that allows users to use a compatible Canon camera as a webcam. A security vulnerability exists in Canon EOS Webcam Utility Pro for MAC OS version 2.3d, which stems from improper directory permissions...