MAL-2025-192295 Malicious code in elf-stats-jubilant-ornament-641 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b627f81ef3d4b49b83a86d60778eb2510e4d1cc4a7d0786394c115f194b9264 The package elf-stats-jubilant-ornament-641 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191558 Malicious code in data-xabit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03b37d6663928ececa76b6d1d4a4debb3e4e4cf163a4f8604f8e16d2df90548f The package data-xabit was found to contain malicious code. Source: ghsa-malware ef666e2a6f2f7477fb30dd787eaf97877e81e62aa9bbe396639b8c7beeebc5d3 Any...

CVE-2025-66266

The RupsMon.exe service executable in UPSilon 2000 has insecure permissions, allowing the 'Everyone' group Full Control. A local attacker can replace the executable with a malicious binary to execute code with SYSTEM privileges or simply change the config path of the service to a command; startin...

MAL-2025-191471 Malicious code in ahmed_salem_t (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc278db8d9e1de9bc4e08bdc6bb126ee202e1f3035b69348d6f1ff66dd448e83 The package ahmedsalemt was found to contain malicious code. Source: ghsa-malware 2b2f4d2a3aa2f5b0a62127ad70f27d33c81f4d216a3fd4ff651f855cbb3b7f8e An...

CVE-2025-66266 Insecure SYSTEM Service Permissions in UPSilon2000V6.0 (RupsMon.exe) leading to trivial Local Privilege Escalation

The RupsMon.exe service executable in UPSilon 2000 has insecure permissions, allowing the 'Everyone' group Full Control. A local attacker can replace the executable with a malicious binary to execute code with SYSTEM privileges or simply change the config path of the service to a command; startin...

CVE-2025-66266 Insecure SYSTEM Service Permissions in UPSilon2000V6.0 (RupsMon.exe) leading to trivial Local Privilege Escalation

The RupsMon.exe service executable in UPSilon 2000 has insecure permissions, allowing the 'Everyone' group Full Control. A local attacker can replace the executable with a malicious binary to execute code with SYSTEM privileges or simply change the config path of the service to a command; startin...

PT-2025-48122

The RupsMon.exe service executable in UPSilon 2000 has insecure permissions, allowing the 'Everyone' group Full Control. A local attacker can replace the executable with a malicious binary to execute code with SYSTEM privileges or simply change the config path of the service to a command; startin...

MAL-2025-191535 Malicious code in tableate (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 762292d92c617c287b3c6b54f7c4a8b8630e7dd893b40dd05bade462fec7ca26 This package is malicious and typosquating the legitimate pyspellchecker library. This package will deploy a remote-access trojan that...

MAL-2025-191458 Malicious code in @medusajs/medusa-oas-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48124e119c7f2c21e744172a5901266335824c5ceac7a1c631805772baa3798a The package @medusajs/medusa-oas-cli was found to contain malicious code. Source: ghsa-malware...

Malicious code in @pradhumngautam/common-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8984d278847eccce8a7e440093a12e26681f10e6534f163544592f20e7539c81 The package @pradhumngautam/common-app was found to contain malicious code. Source: ghsa-malware...

Malicious code in @lessondesk/material-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 124d8e4d2ba731e6a005fd1c68c60af6629b037c8c121d0468394110d2f98103 The package @lessondesk/material-icons was found to contain malicious code. Source: ghsa-malware...

Malicious code in @lessondesk/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef9fcb377fe99dad0e34ec63a5ac929adfc5d8be48e49d330d4785e1d2a6a7f The package @lessondesk/eslint-config was found to contain malicious code. Source: ghsa-malware...

Malicious code in victoria-wallet-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52da1ed8745249f87107187efa740b8362b45543bfa3e003ebdfd585b2e7ef2e The package victoria-wallet-utils was found to contain malicious code. Source: ghsa-malware...

Malicious code in get-them-args (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1885f72a03b5b12ad9795b819da4d8cbd92b5985848b3f9a057afd389de5a8f8 The package get-them-args was found to contain malicious code. Source: ghsa-malware d70e3f04273d02fdaa9555197354a75aba13abe81a22763a353d47db93ce9b32...

Malicious code in flapstacks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3e9f1a599a57853dfcaac8296e337783da36d9fbdf2545320a59a3ac12114e The package flapstacks was found to contain malicious code. Source: ghsa-malware 26f6aaeff17a92e5a6df4148bfbcbaf24b10d838e3623a219ea63a5e5440d7fe Any...

Malicious code in jquery-bindings (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31127dd6191c9d3e68e94d705b43d24066f06f37b41f659a5a6831a8a811fc11 The package jquery-bindings was found to contain malicious code. Source: ghsa-malware eb6c4671167bd91b31b632f661a4bc8a3d627412796b9899fae3d0797eb51e3...

Malicious code in feature-flip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70f38090f7d06e2ca6dedee4db704eb48de8c582ee65be6a5142487fba31d1e1 The package feature-flip was found to contain malicious code. Source: ghsa-malware 1d3a90cfc6cc14cf62f81b6f2ca995f00fbff67b1b819ba339516765de278bd2 A...

Malicious code in fat-fingered (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5e127ac8099a8bee6fc42a5c3911a275384f00af4cd97082dde08a2bf2704f The package fat-fingered was found to contain malicious code. Source: ghsa-malware 77d5770972318f63a00eb2722c056f2e554e8970abd97f94cba9a3dde292a8d8 A...

Malicious code in wenk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209b9df1ab21f1d5e193a2a9e68ece62122dc7979592c1f21599dd018aebfff7 The package wenk was found to contain malicious code. Source: ghsa-malware 440c248dbbb7a7c4fb5db4f70f71b5dd51ca4287f3d4e83c7caceeab7aee2dd8 Any...

Malicious code in n8n-nodes-vercel-ai-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e3e7549add420dd6e29fcc100779e22f42e36e3d6a194d64ac5cefe5a764971 The package n8n-nodes-vercel-ai-sdk was found to contain malicious code. Source: ghsa-malware...