Malware in a-vailable-al-bum-file-the-world-wont-end-7io2n-pbncia

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in a-lbum-do-wnload-avai-lable-file-36733-tchamantche-9uiic-rfzaip

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in a-vailable-al-bum-file-the-world-wont-end-7io2n-pbncia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8a3de985ebc9e2a00f5373d91fa6cb4289d523f15eedf107dbc88812770218f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in a-vailable-al-bum-file-30258-secrets-of-the-beehive-rk1pl-vebirt

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-18028 Malicious code in mp3-file-zip-d-ownload-hearts-of-oak-7cyqu-oiygcz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74975ac076a1d390227e09308021132195615ea9e569d6320a2d04d6ef51ffdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in mp3-file-zip-d-ownload-48120-lost-nation-road-0cibe-ynawhz

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in alb-um-availa-ble-zip-mp3-file-43838-stories-of-the-years-sslgg-bqfcko

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in mp3-file-zip-d-ownload-48120-lost-nation-road-0cibe-ynawhz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b46450dbe9541d268f8ff08a5d94671796222a3cda2686dbd030ffbb6ead4ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in a-vailable-al-bum-file-30258-secrets-of-the-beehive-rk1pl-vebirt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 711a60021cd8fa5baa56abf71a1eb5e317d5fada82562f8bb1c413542b587ad5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in a-vailable-al-bum-file-2015-39171-harmlessness-khwlm-ihtwah (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44e7ca3c4d507aa771d14fbc0799332e839a84404bd26ce164b5902c998fbee1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in a-lbum-do-wnload-avai-lable-file-36733-tchamantche-9uiic-rfzaip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7da7a677624beee237b4a10d035455adc4b9475ce9ac87eb54ad9f9bf00b7f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in alb-um-availa-ble-zip-mp3-file-43838-stories-of-the-years-sslgg-bqfcko (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d116e3e21a54c953174cfea5d38e38c41e5681b3182c2bf04410029693a584c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in alb-um-availa-ble-zip-mp3-file-6053-the-specials-giqmz-flbewh

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in a-vailable-al-bum-file-2015-39171-harmlessness-khwlm-ihtwah

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in mp3-file-zip-d-ownload-hearts-of-oak-7cyqu-oiygcz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74975ac076a1d390227e09308021132195615ea9e569d6320a2d04d6ef51ffdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in alb-um-availa-ble-zip-mp3-file-6053-the-specials-giqmz-flbewh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9eccc0208c328a4c0e6b718a982268822d174d7575713c3314230f6df93009fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-112310 docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRef

docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allowimagefileuri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported wit...

CVE-2026-112310

docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allowimagefileuri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported wit...

CVE-2026-112310 docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRef

docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allowimagefileuri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported wit...

CVE-2026-112310 docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRef

docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allowimagefileuri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported wit...