MAL-2025-1664 Malicious code in ad-creative-preview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4976ed17af1930b3c8e965b09664d5243a6cfe6bfa46e841964001beb48fb316 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1662 Malicious code in sip.js-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc79a8a90b9e2756012e6ea436db1bc15c17b4596bcedc556ce70cfd8800d99c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1655 Malicious code in secureshield4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f23bae727a469f26985689c3f9d59601b7bfd53e52b3cf2b271a56941e37af5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1647 Malicious code in figma-plugins-and-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 250144845a9dd4a7a0bea8a44c06f50652890d4ab2f0fb860bb51a5a14ea1a54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1644 Malicious code in ark-boostrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03a498b564f81996bedc4aae91489b170bd4479c5e696b00a8e467ecc39f02c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1594 Malicious code in florida.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3d7e6be1bc774c1ef6319cadd069a16f80c91ee44eb6b07fdfe088661f0b0cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1608 Malicious code in material-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc52f979cd49a98ecface27ce64a898eb95dad649bd6d9ffac7c11ce434a9697 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1615 Malicious code in multipage-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13f2d0c3e5db704d6bce0de0eb2729951e279aa28be75eafa0df32e85a38e3c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1595 Malicious code in golanci-lint-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e69962c9a060f9d61253d944cc7c3573debc57053555bb4dd496618bc1b6510f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1598 Malicious code in ideal-paypal-payment-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a0c63436afa43460fe75374c026568d5b5f17a29326ac24517be8a2b1dcd113 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1580 Malicious code in cosmos-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6053f00c9e4d23811647b64304eb319d346117494a434dad02865fe92a7e68e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1605 Malicious code in liquidity-bridge-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f40a6382779a7d45d5a09b615daea39485cff80a3a6d9b0b8a1b5ad3f68d4ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-22270

creationtimestamp| type| source ---|---|--- 2025-02-28 13:18:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114081708717061505 2025-02-28 13:27:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5896 2025-02-28 13:27:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5897...

CVE-2022-49616

In the Linux kernel, the following vulnerability has been resolved: ASoC: rt7-sdw: harden jackdetecthandler Realtek headset codec drivers typically check if the card is instantiated before proceeding with the jack detection. The rt700, rt711 and rt711-sdca are however missing a check on the card...

CVE-2025-1757

creationtimestamp| type| source ---|---|--- 2025-02-28 05:26:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5836 2025-02-28 05:48:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj7phl2w3x2w 2025-02-28 07:49:34+00:00| seen|...

The SOC files: Chasing the web shell

Web shells have evolved far beyond their original purpose of basic remote command execution, and many now function more like lightweight exploitation frameworks. These tools often include features such as in-memory module execution and encrypted command-and-control C2 communication, giving...

SUSE CVE-2025-21777

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Validate the persistent meta data subbuf array The meta data for a mapped ring buffer contains an array of indexes of all the subbuffers. The first entry is the reader page, and the rest of the entries lay out the...

How Scalping Bots Exploited a Vulnerable API to Disrupt Online Retail Sales

In the fast-paced world of online retail, where customer satisfaction and availability are paramount, a sudden attack by scalping bots can disrupt operations, inflate costs, and damage reputation. A North American Online Retailer faced a month-long bot attack that targeted their inventory system,...

MikroTik RouterOS Detection (Winbox)

Winbox based detection of MikroTik RouterOS. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Lexmark Printer RCE Vulnerability (CVE-2024-11344)

Multiple Lexmark printer devices are prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...