Malicious code in node-facebook-messenger-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38fe2abbba605a3d0f5ab5869e1dc17d20562f1702817cf1c23057e9b3681dfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2013-3280

EMC RSA Authentication Agent 7.1.x before 7.1.2 for Web for Internet Information Services has a fail-open design, which allows remote attackers to bypass intended access restrictions via vectors that trigger an agent crash...

Malicious code in ultimatepower (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79a2b1d92e7a7944260e21d39f2b6724e8903106957b245238be128a625245b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in db-cleaner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a72cd0c1c8572d55b42f5b29e3ba12562254d45caf82e25ebe93583f35e9af68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in raydium-cpmm-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a68f5f91f0785da373b66be5a860df09b0d9ce675bc77749fe781b9d85d8a1bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in feast-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f88382c749d318e08be547eac655736cdeb1c86d92ae6ab6dd46e489e668c86f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ideals-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9dc50c85c983d6fae92067eec047d6e22d93ddd342cca6345a30c7e42c4e37fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pog-ui-landings-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 958b647cd78bfe4822d3c9b88bb93606783f6f5c4f46fb06c118181cc545fe5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fastifiyer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3da19b8f86e82a5ab61d8134531f7e1f001bf858555808eca76c3f03deeff06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nayan-videos-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d1573283fc5f3c3cc201c1ab6beeac91054b77dcbcf01aa700ff72240c02260 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in o1js-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9235ed25ae95d4286d7a3d5379bd815865a81ccbbf126851fcc04271ec639987 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gear-idea-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a66acd20e2061aa436f304d41c80567e858c74d563f53fcd774df5bce17c47b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-37870

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: prevent hang on link training fail Why When link training fails, the phy clock will be disabled. However, in enablestreams, it is assumed that link training succeeded and the mux selects the phy clock, causing a...

Malicious code in @johndeere-tech/helios-ng-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cafd54c91f17226053b5247b4cd518c79cc4e6462f2bf35455fc9a9f8b55c42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in use-videos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 235a97287f989e663a85f1ec29b96d80b5450762113cbd52a39972e47876539c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mock-arduino (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48d73b70939f251f17499370180f9ead09a5ee724078cbec4a11fe29a9a9f02b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in substrate-faucet (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c694048c1a8c1f3c9b8f183f75e0a9464e084cdaa8fc58c9a770190c4ab4824a Any computer that has this package installed or running should be considered...

Malicious code in gql-test-client (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc1a4e0775ef3923d488773c12cfaaa56a985b4f914af402f9598ea0d564b883 Any computer that has this package installed or running should be considered...

Malicious code in twewewewest6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e24697bace34244c6963d54b8439296aa2903a23b68833af4712c3506830d198 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in socket-event-trigger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84c96a1eba1263914947232b5710b1f74986be68b124fefcbd733643ddd31c47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...