CVE-2025-0813

CWE-287: Improper Authentication vulnerability exists that could cause an Authentication Bypass when an unauthorized user without permission rights has physical access to the EPAS-UI computer and is able to reboot the workstation and interrupt the normal boot process...

MAL-2025-2389 Malicious code in key-lister (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f9c33eb066fce6253ba86498debbec8fe000ace68796a6bddf5d95e431551b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2369 Malicious code in core-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5db7bd8a50f90b0c2bda2716a859031b731da7ec6f2a6bdb9ebe567eb5b042ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in resolve-configuration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf22f1493080c3efff908ff35ce4b307f9fc4460820a84c65f7bb4129e8b5289 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2432 Malicious code in vue-plugin-rely2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40758ca258b918a5774943b38676e85d236795a65d98fe659605aa7b2f72db83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2375 Malicious code in ding123123131 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45c68b87a0d236585f3f6cc5b18c3d73a4948ada4344c7a0a6d97f2c81db0364 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2417 Malicious code in spark-botkit-servicenow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db9e7b07208198145174b016dd7c98f443f46d0605e07e3f8a84f24f58efd4ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2365 Malicious code in build-toolchain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84247c237b0069d75302ed5c41a15415446a4acfd0ec02984a32130adb4e03fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2361 Malicious code in app-bridge-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 933905ebdc76407c4ff291a44e25a77e8a04375225a902461a37355fbc45e0d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2355 Malicious code in @sp4b-dev/test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8e7426f9d54cc828e89c1705451a4bc027546b2b2147cefc819a8897f7895b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tfjs-layers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01a2e2a8e8d3d2e521a17fe1f820c031a83b9a0b1a45819059fba2bc47348f98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2421 Malicious code in tfjs-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dae377a98248827b019055c5171dbcb50bf6eaeae0dd3c0dbf2bb48146fb6ded Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tsl-select-trigger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 072755e39bd14b6660b02fdc071fceedf4d4cf76f4f27561b12b19a8fa70f135 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2398 Malicious code in paypal-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49c178990e4d2abbd4e7efb2ade6f3fe47a33939e54842b787848f1be8809ee8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2426 Malicious code in tsl-card-body (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3b827feadef7c2656600460243604631e02bc0a0b8ade3e8f317a7a5964ffd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2386 Malicious code in hellojpd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5216993f2a0d870809bc528d5b98b4577c5ee8891c30e6541d8d982bb93d9110 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fnd-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2bd94b1bacafc118701343fd0538943fa1b8d0f44cb6e2418ff9feb47ab171e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2403 Malicious code in projects_workspace_events (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1577d2b286c60b8eded2d7d5b4a2393205ed7407c3173cabd9c87ed769e025cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2360 Malicious code in apache-superset-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1661502573ce2ee16beaabec0853d68140a4e4aa5372720f3f20359cacfaed78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2409 Malicious code in remix-run-route (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5399b923491b48948c89e6e1e30d9d3028f6bb8db3bdc9f8d48b513a879ac1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...