MAL-2026-5638 Malicious code in tw-fluid-type (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c3bc3497d6c683f52210ca201500d27cf9e2bcccd976883be2ed85d17569b54 The package advertises itself as a Tailwind CSS fluid-type plugin but ships src/utils/lib.min.js, which is loaded as a side effect when the package's...

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the audit logging process. An attacker can obtain sensitive authentication information by accessing the audit device. This is only exploitable if an attacker has compromised access to...

Malicious code in @sev-ui-verse/authentication (npm)

The package @sev-ui-verse/authentication was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3492bfe4d8b65a2239adf76adf321c36a385fe94efabe1ef8f1ad32b6c262b30 Any computer that has this package installed or running should be considere...

MAL-2025-5643 Malicious code in eth-multisig-v4 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0011f8c820d2bf5736f029e749e3b1eb172ec056d5d712b620b95ef9ba5aa4dd Any computer that has this package installed or running should be considered...

MAL-2025-4508 Malicious code in skinnyvans-windows-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40605e85e89ede7d84e01953d5f081b7c5712debaf12245bf3596d64b23ec377 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seatalk-rn-leave-calendar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6b9f25c23e2b93d7cc848ce9ac2aefaa73aee0ef2467191ce24bc4c3d5d797f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crash-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80ddc752065839529322059bc8e3819805b3124a81dea81cfd0a905b9e8a4371 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in people-web-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ed2dcda2ead97760a4a4fea82ae78d0ef1760ac562cb4813316164cad4bc942 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in visionmedia-debug (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9f97da9aaeeef379ef75184d8cffe9373b7cbab6709cfa793ae839d7f8ee2a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-5659 Rockwell Automation Multicast Request Causes major nonrecoverable fault on Select Controllers

Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable faultMNRF/Assert. This vulnerability could be exploited by sending abnormal packets to the mDNS port. If exploited, the availability of the device wou...

Malicious code in @12build/segment-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 856e63ff9eebaf0c3443eeee789588cf844ca28e1810394d67c01e5f5a4aa601 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in whatsapp-landing-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6dfeb2e9b7018dd0e4d3c0b412ca067d8db34afd80fe1974702b9c96969b842 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in anti-hotlinking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76c97a43952ed880740537fc410c1ddd8b04eb4380cac2852980ae49901a9c76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ember-font-awesome.no-fa-prefix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cddea9d19e5c049fa86103d3bb9319dec8bf8aad46fa69a9bb23c6730920eee0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in feedback-web-renderer-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f48b26eebb7791e7260e8c048e98732a9b63de3e8850e6f8ad5a56bc11521f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in types-publisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c5e10c0aa349b60675cf999eed9975b810b50e1a6ae2765872fe8181595e355 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in protractor-skeleton (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 398bc113b61996f88264d11340911401694d080a3831d6d91d2144c51c860a2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PPTP Server/Device Compromised

The remote PPTP Server/Device might have been compromised by an attacker or a worm. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as...