MAL-2025-3539 Malicious code in nsemea-sample-parenttransaction-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a41c3f9782e1fb062bef2307e7300491d25460f761f7e9da305bc92e541c850 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3514 Malicious code in @baywa-re-lusy/nsemea-core-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd59217d2262d20a36701378b6fc7047b8f1a20c638f6aaaf18af11316648ee8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3538 Malicious code in nsemea-sample-childtransaction-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f4b18779b0bb2c86773ae3990f1a744ca1d48e6edc3c9fdb2e54b24dd288cf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @baywa-re-lusy/nsemea-customer-lib-poc

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in nsemea-purchaseorder-lib-poc

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2025-45956

A SQL injection vulnerability in managedamage.php in Sourcecodester Computer Laboratory Management System v1.0 allows an authenticated attacker to execute arbitrary SQL commands via the "id" parameter...

CVE-2025-45956

The Sourcecodester Computer Laboratory Management System v1.0 is vulnerable to a SQL injection flaw in the manage_damage.php file. An authenticated attacker can exploit the **

PT-2025-18191 · Sourcecodester · Sourcecodester Computer Laboratory Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Computer Laboratory Management System version 1.0 Description: A SQL injection issue in the manage damage.php file allows an authenticated attacker to execute arbitrary SQL commands via the id parameter. This enables the attack...

CVE-2025-45956: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in managedamage.php in Sourcecodester Computer Laboratory Management System v1.0 allows an authenticated attacker to execute arbitrary SQL commands via the "id" parameter...

CVE-2025-45956

A SQL injection vulnerability in managedamage.php in Sourcecodester Computer Laboratory Management System v1.0 allows an authenticated attacker to execute arbitrary SQL commands via the "id" parameter...

Malicious code in husky-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b01a82774c925f898dadeaf8b27ddb3aa194a11d46fbc9822c04427de0c99f71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3495 Malicious code in husky-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b01a82774c925f898dadeaf8b27ddb3aa194a11d46fbc9822c04427de0c99f71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3490 Malicious code in fc-online (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a64a01d4995610a37c1690ecaecc64be60f68c266b77ef1c80acceeb303ac71c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in needlecast_b9s_jewel_fyc_fe_client

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3501 Malicious code in needlecast_mvd_ads_site_client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61ce65a4d7678f6d84073ddd091e870fc620022fdb560eeec0138823d6ac0b74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in needlecast_mvd_ads_site_client

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in cerberus-management-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a81dea17b012ce7621aca36c310cec6946eda16345c910c4537a673db19c794 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3487 Malicious code in cerberus-management-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a81dea17b012ce7621aca36c310cec6946eda16345c910c4537a673db19c794 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3493 Malicious code in green-giant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5124a99877f0c6c7c80799d23850b5b5c3f7f308ecdbfcfba13300c69a3fd72a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in gcp-alert-service

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...