Malicious code in badoo-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f34bcbd01ca161f63d72e98370e08614774ebfcc25c4b90ac0ec79d6825baff7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-30768

A Stored Cross Site Scripting XSS issue in ZoneMinder 1.36.12 allows an attacker to execute HTML or JavaScript code via the Username field when an Admin or non-Admin users that can see other users logged into the platform clicks on Logout. NOTE: this exists in later versions than CVE-2019-7348 an...

CVE-2021-33390

dpic 2021.04.10 has a use-after-free in thedeletestringbox function in dpic.y. A different vulnerablility than CVE-2021-32421...

Malicious code in random-dupa-test-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99f5f604116e448aa422338fa8d271809af42a57332bbff2963599c372b0ab01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in icloud-sod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 528df6a9814a12abf16c70b3d096b10babfdae854b8a9952ab8ad5b69790a077 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2008-7228

Multiple format string vulnerabilities in WhiteDune before 0.29beta851 have unspecified impact and attack vectors, a different vulnerability than CVE-2008-0101...

Malicious code in system-v11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b2372e93f563dc553212e0fa13f72a19f5e5a99223516178d784f8a4186353d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ducksthegoatedone/ducks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07996ce8fcdd695995919d84cd1d62b1a127fab349bef9399e413b78c2ba1fab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vue-dev-serverr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a206a0d6714ab34f1c8c8d7893e516f6babb7bb3bb786fa679bde0c300e4815f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-4885

creationtimestamp| type| source ---|---|--- 2025-05-18 15:55:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lphg6qvn75c2 2025-05-18 17:12:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lphkjyf2ls2h...

Malicious code in npm-scrapper-faris (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ff29440d7ea5c240dc8376e18b662318b42eee0fdcdf7aa00c931bb46371416 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @hotmart-org-ca/cosmos-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89700d34b5a1408237d5b8242b8ea7483428776eb1f091232bd3c1aff711a230 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in opensource-marketplace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 974526369e603fb5c185bc7f3413907573ba2934f77f38446e73607af8847fd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nx-frontend/bonx-microfrontends (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7af50dccc3cbb0c3e00ef011f706bb39fc39193bcc2384fd252b362a4f06250e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in create-krnl-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 211459e94c3ff6a3713ee7a8327fdef67b1eaac62530f22c658dad263fa901db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server

...

Malicious code in internal-company-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6546fa1cf98f708a73bf9fbfdaeeef7667dc18db200c8b221c4e61a1507d02a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Improper Ownership Management

Overview Affected versions of this package are vulnerable to Improper Ownership Management for projects, whose namespace defaults to being the project name, regardless of cluster. A user with permission to create a project can escalate privileges to those of a user who owns a project by the same...

CVE-2025-46535

creationtimestamp| type| source ---|---|--- 2025-04-25 09:07:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13395 2025-04-25 09:20:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnmvfyg7zs2b 2025-04-25 10:44:57+00:00| seen|...

Malicious code in vertex-lba (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a8170a76fcb89603064ada9f6b9c67cf6806bf216e81f92cfb42bb979b77053 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...