MAL-2025-5521 Malicious code in sysframe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8723a89cda98ce8c96a4c09293bc2d707ca721e8a2f72e88f1c54743f14002e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Honor PC Manager 安全漏洞

Honor PC Manager is a management software developed by the Chinese company Honor Honor specifically for its computer products such as laptops. A security vulnerability exists in Honor PC Manager version 16.0.0.118, which stems from a misconfiguration of the security properties of the named condui...

MAL-2025-5407 Malicious code in example-target-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c527df8a6a7f920a0fd9146bf4a738da075f6430ad4a523d1c345fe4deb26b7 Any computer that has this package installed or running should be considered...

MAL-2025-5460 Malicious code in sizings (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 393af076bb3b03dbc0a98992d0876a85e7b2cea1450e48e012de0ba71943f8b5 Any computer that has this package installed or running should be considered...

MAL-2025-5433 Malicious code in mapbox-gl-js (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ada891fdc8acdf8af20afcf9782848cf7cf035176b623fdf8c82a3b046d43005 Any computer that has this package installed or running should be considered...

MAL-2025-5412 Malicious code in govuk_frontend_alpha (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aaaf365f7859857e3e00a40b24b6c5c83485edea64290455cece2610cca84bc1 Any computer that has this package installed or running should be considered...

MAL-2025-5402 Malicious code in epic-mw (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6537e833320c30d33c6e8b2c61927748ebe0fc1066a6b60415d10c2d2470f7c Any computer that has this package installed or running should be considered...

MAL-2025-5396 Malicious code in dynamic-target (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb117b6b1845227fbb96ae7be9dce72567b6a74510e9d7e2bd415aa38d2685dd Any computer that has this package installed or running should be considered...

MAL-2025-5447 Malicious code in online-learning-translations (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 868acedaa0c2050db6943bc3a4a1b309e10110417f79ea031b8b01107f4fc599 Any computer that has this package installed or running should be considered...

Malicious code in bootstrap-modules (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a45d845a42d64eb0f9732d82ec558f52eed95f2e905ffec7f0ae2849f78104e1 Any computer that has this package installed or running should be considered...

MAL-2025-5462 Malicious code in styled-components-react18-v5 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66d52b4bf89a840fc85060c046eff8faa5d258a0e3d47a52abf3c7b522ca1762 Any computer that has this package installed or running should be considered...

MAL-2025-5285 Malicious code in react-plaid-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2e5a7cd6740a8b92b5b0c681bce252fd1850ace8501de899aea496321176c95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5289 Malicious code in sumsub-node-websdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0f130a771df580704e11f7b16a38ff74d7630406d6acd868819477435c331e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spoofer-ip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2da3af6f33c88ebffe3e46690a63880708c162a1c710ff72131cf99f3ead9674 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rush-sdk-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fa10be10595dcaddcd28ad64cd62ae55a44b7354d6bb1de952adc3cdc5b5c89 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5286 Malicious code in rush-mcp-example-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4593979eeb7174aea0989af27a63ee606786e382185ca406a15e9d4368c687b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Canon EOS Webcam Utility Pro for MAC OS 安全漏洞

Canon EOS Webcam Utility Pro for MAC OS is a software designed for Canon cameras by Canon Japan that allows users to use a compatible Canon camera as a webcam. A security vulnerability exists in Canon EOS Webcam Utility Pro for MAC OS version 2.3d, which stems from improper directory permissions...

MAL-2025-5258 Malicious code in create-one-page-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33e88b813de8bbedaaa44610c78b34cf8ef9b2bd2b7489a8519784f79b7434a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5435 Malicious code in media_videojs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9e2d4c098696f8d6f785f1e8a2674e14ce4fba193940fd5ed1fbe6eb8f1e266 Any computer that has this package installed or running should be considered...

MAL-2025-5458 Malicious code in sap.ushell.components.tiles.utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c610571a96a422fc7b583bd55f4996dc51b894fe4d4a8cf415f7ebf1be5caf7 Any computer that has this package installed or running should be considered...