Malicious Package

Overview dt-frontend-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-48281 Malicious code in frontend-photoswipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e08a30dcf287f7992949bf9a4870c6201c42b3aa3b59e0966a677899b4bca376 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-33607

Malicious code in frontend-photoswipe npm...

Malicious code in frontend-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd81764709c7d0f5174dd0a979519b3c85894302b3df75acedbf1de8500d3c07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48280 Malicious code in frontend-metrics-collector-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33df4b3fc95229c6a1af21ef46dd94df8a0c7f647459b6b83dd1a92149afbbdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48278 Malicious code in frontend-google-tag-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4f6a0228c6c8a63f058b39d72aa7f23d1f92b03e46a8f5dff1b1f856bbb6306 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48282 Malicious code in frontend-prevent-open-redirect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d7d715ee921f7aa5445a7b69d8ee16f1c90ff529d86220f569ab70de2afa71e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview frontend-google-tag-manager is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

EUVD-2025-33608

Malicious code in frontend-metrics-collector-sdk npm...

MAL-2025-48277 Malicious code in dt-frontend-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d84c9e90fa62a28e4b2b22f78ffa732463fd6351f426e71f105661f00179e4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

📄 MotionEye Frontend 0.43.1b4 Remote Code Execution

This Metasploit module exploits a template injection vulnerability in the MotionEye Frontend. MotionEye Frontend versions 0.43.1b4 and prior are vulnerable to OS command injection in configuration parameters such as imagefilename. Unsanitized user input is written to MotionEye Frontend...

MAL-2025-48019 Malicious code in @erfix/frontend-logge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d973875f0d40732e29d66965b35f958f31dbb712559269aa4cdaba829fffd571 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-32962

Malicious code in @erfix/frontend-logge npm...

Malicious Package

Overview @erfix/frontend-logge is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-32960

Malicious code in hrm-absence-frontend-deps npm...

Malicious Package

Overview @erfix/frontend-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

EUVD-2025-32961

Malicious code in @erfix/frontend-logger npm...

Malicious code in @erfix/frontend-logge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d973875f0d40732e29d66965b35f958f31dbb712559269aa4cdaba829fffd571 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @erfix/frontend-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e4b5af69993779ed1984e8970f7b383a3bc21080f172d627bec94a8de475212 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-61668

Volto is a ReactJS-based frontend for the Plone Content Management System. Versions 16.34.0 and below, 17.0.0 through 17.22.1, 18.0.0 through 18.27.1, and 19.0.0-alpha.1 through 19.0.0-alpha.5, an anonymous user could cause the NodeJS server part of Volto to quit with an error when visiting a...