MAL-2025-3288 Malicious code in list.fuzzysearch.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e7008d1b039aad972325f177113a9d0a1843f63cd1c83d67809a42cca84abfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in log-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0400bb349db4659330ea5f9fe4c12f9223c56f208b6d3a709ac074229e78f913 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in camel-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1098fc52f4799d50da4e83a966625fba756fb0f48d2f27f3fa9b966a972d035b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3285 Malicious code in discord.js-selfbot-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab72c09e960ea50f08197c72eb549889779b0936abc22064b5adc5d2600361a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

📄 Joomla 3.7.1 SQL Injection

Joomla version 3.7.1 proof of concept remote SQL injection exploit. Exploit Title: Joomla 3.7.1 - Sql Injection Date: 2025-04-16 Exploit Author: Milad Karimi Ex3ptionaL Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL MiRROR-H:...

Malicious code in router-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcafd9f13b763d68deff486e2c07a83a3824640dfb106f472de1e049711de470 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fine-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efa7db7b7f29b44c0f53be5db51efa983975a15a5343fd0adf918ed6f7284c52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-json-converter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ffbaad687f777a1680340dedffa3333cb8f4e0ada8e0a886e7f798a9a59ee2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3223 Malicious code in @0xzyo/confutionrce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f2d1c1c9b369aed6d0d62b32d27becf33fda24166695accd6ecf90d1ece233e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3253 Malicious code in helper-get-function-arity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe6b0eed25b742c658cc72def3908deee73b79a6685d9c81ba0c7fbb8a4273f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helper-plugin-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 637e6aa11d35ac301a88fea209827ad1ebfe949fe5c2db4ffd66509975d13ef6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-exp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b858cc86e409526d24e16f5f635dea2d7cae8c178366e14a5d2843bed3931ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fatfingers-helloo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 473958a91938ac87fe7925feadb207cc144a2e7e1d9cfe7f13029190825091e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fatfingers-hellooo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea42b9a5e56641f6c3e9c1a3e1ebcb7adb7866c55d2fec0542f9fb6f2d37f6c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3246 Malicious code in fatfingers-hello (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 772fb028e6aa0e6a10ca2ebd43f559a22b08f432b864944aab162648a4e4a0ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3248 Malicious code in fatfingers-hellooo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea42b9a5e56641f6c3e9c1a3e1ebcb7adb7866c55d2fec0542f9fb6f2d37f6c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3243 Malicious code in fatfingers-hahayeet33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c493777df023436a0434514b500e7841fce42e9f56e3c4249ec74ee0db2dc9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3229 Malicious code in airbnb-datepickeroptions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 863302cb49601a697c0ab1dacb7cc78b529ff2a24b8185ceb782a5a48c10248c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3235 Malicious code in dc-genai-dropin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4921314e7e97ba500355f996a14c9619cadf54912d2dfdbe5eb22750a5e5c1c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3267 Malicious code in zkevm-rom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebca28836b13291a84823420d145b2150d556abbd4d19fbf2dfeacf67a7553ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...