MAL-2025-3547 Malicious code in carcandofilex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d04f8661d47623c323ee795cb954afb6a58fcaaae0b911beb0f6752004996496 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3545 Malicious code in basstiontrestbeesk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b8881eb059c7180bd2dbd7b6d31f02a7d5afc3da2401f20cf1669e23e80bdd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3546 Malicious code in blur-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 546086c9d282770ea8502cf0f8216b1108513a9a88261a4f447bd8ec95a09b0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Digital rampage saw ex-Disney employee remove nut allergy info from menus, dox co-workers, and more

A former Disney employee, Michael Scheuer, will serve three years in prison for computer fraud and aggravated identity theft after a digital sabotage campaign against his ex-employer. In addition to his sentence, he must pay nearly US$688,000 in restitution. Scheuer, a former menu production...

MAL-2025-3529 Malicious code in multicogs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f85a167740adb72f8d007b2b4adaaa8b7f08b2b5626f394606d41c79afaed4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3538 Malicious code in nsemea-sample-childtransaction-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f4b18779b0bb2c86773ae3990f1a744ca1d48e6edc3c9fdb2e54b24dd288cf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3539 Malicious code in nsemea-sample-parenttransaction-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a41c3f9782e1fb062bef2307e7300491d25460f761f7e9da305bc92e541c850 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3537 Malicious code in nsemea-salestransaction-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 202c3434714473d68a43ed2c7365e4ccde3af7dfe6c2a93a2496b00b88304ff6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3531 Malicious code in nsemea-alias-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a6452557c7bf4d2ec5fa907c2a427e3ee1cdff756a76f9d2369a64a48e239d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3513 Malicious code in @baywa-re-lusy/nsemea-alias-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f67616e336d1069f944f5d2fb535344c5f54f4d5d99c99811786e5dd237824a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3530 Malicious code in nsemea-address-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 783f17774ff266fc48db4fdc996b01c5fd5babaa6db1c0aaf76f53fbd348dd0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3514 Malicious code in @baywa-re-lusy/nsemea-core-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd59217d2262d20a36701378b6fc7047b8f1a20c638f6aaaf18af11316648ee8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3535 Malicious code in nsemea-quote-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5af99966c46bd796b931ae02be0aa5469d9e60463ab86b879488fff2e1965c0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-45956

A SQL injection vulnerability in managedamage.php in Sourcecodester Computer Laboratory Management System v1.0 allows an authenticated attacker to execute arbitrary SQL commands via the "id" parameter...

PT-2025-18191 · Sourcecodester · Sourcecodester Computer Laboratory Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Computer Laboratory Management System version 1.0 Description: A SQL injection issue in the manage damage.php file allows an authenticated attacker to execute arbitrary SQL commands via the id parameter. This enables the attack...

CVE-2025-45956

CVE-2025-45956 affects Sourcecodester Computer Laboratory Management System v1.0, via SQL injection in the file manage_damage.php. An authenticated attacker can leverage the vulnerable id parameter to execute arbitrary SQL commands, potentially compromising data integrity and confidentiality as r...

CVE-2025-45956

A SQL injection vulnerability in managedamage.php in Sourcecodester Computer Laboratory Management System v1.0 allows an authenticated attacker to execute arbitrary SQL commands via the "id" parameter...

Malicious code in husky-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b01a82774c925f898dadeaf8b27ddb3aa194a11d46fbc9822c04427de0c99f71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3495 Malicious code in husky-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b01a82774c925f898dadeaf8b27ddb3aa194a11d46fbc9822c04427de0c99f71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3490 Malicious code in fc-online (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a64a01d4995610a37c1690ecaecc64be60f68c266b77ef1c80acceeb303ac71c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...