Malicious code in thedata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e05613178114f2f3d9171f429a5b6aba8e1a525e07db22d150be81c02d6f595 The package's main entry index.js re-exports two values, rsaKey and desKey, from apps/docs/app/theta.js, which simply readFileSync's...

CVE-2026-57259 Foxit PDF Editor/Reader XDP XFA XXE arbitrary local file read

The input file does not need to be strictly in a structurally valid PDF format. Instead, after reviewing the content, the original document disguised as a PDF will be sent to the parser. Malicious documents will construct malicious external entities that, through the protocol, point to local path...

Malicious code in txs-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74154a8e4e769872929446eb17b4dc59a1b491508c7bd05e55d1cdb232ecf2aa The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-3439 Malicious code in @squawk/airway-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f583cb04df39146f4b9270ebfb086bb84b5cf8f799a0565f4b26163ad2a34cd1 The package @squawk/airway-data was found to contain malicious code. Source: ghsa-malware...

@squawk/mcp (>=0.4.1 <=0.8.5) potentially affected by unknown CVE via @squawk/icao-registry-data (>=0.3.3 <=0.7.1)

@squawk/icao-registry-data NPM version =0.3.3, =0.4.1, =0.8.5 Source cves: unknown CVE Source advisory: SNYK:JS-SQUAWKICAOREGISTRYDATA-16640875...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Malicious code in kiki-keripik50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e971379e247d4c640907ce64e53b7a5db1b0285878e826f49b63e0355f8b3bf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cloud-data (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 424f85d34d816976e9e4e9674c41801256f7db680cdc2c3ce4c5363bd81c876a Any computer that has this package installed or running should be considered...

EUVD-2022-1107

Malicious code in bioql PyPI...

MAL-2025-29531 Malicious code in post-data (npm)

The package post-data was found to contain malicious code...

MAL-2025-39367 Malicious code in wix-data (npm)

The package wix-data was found to contain malicious code...

Malicious code in atlas-data (npm)

The package atlas-data was found to contain malicious code...

Malicious code in post-data (npm)

The package post-data was found to contain malicious code...

MAL-2025-15007 Malicious code in atlas-data (npm)

The package atlas-data was found to contain malicious code...

Debian: Security Advisory (DLA-4261-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 4226-1] dns-root-data DNSSEC trust anchors update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4226-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler June 23, 2025 https://wiki.debian.org/LTS -...

MAL-2025-3233 Malicious code in compat-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4afe39daa379d928222ec923465f7ac0593e4e1cd17e005cdccb0cbfaffe82e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in compat-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4afe39daa379d928222ec923465f7ac0593e4e1cd17e005cdccb0cbfaffe82e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2421 Malicious code in tfjs-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dae377a98248827b019055c5171dbcb50bf6eaeae0dd3c0dbf2bb48146fb6ded Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2165 Malicious code in async-query-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c182fcd486203b0e1bcf7d1677e5b65105252c5d88f343b159e8dec92e0c772 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...