MAL-2025-48962 Malicious code in @gitlab-lsp/pkg-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7df0575a200975029552912084573cf0331e1cf02ccad8e8fd7e024536143ef8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48960 Malicious code in @apache-netbeans/netbeans-antora-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64c5548a67ff295a5fef8341e288347ac54fd9677bfd0be6e0752cc670888f37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48963 Malicious code in @gitlab-lsp/pkg-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf13c79e9bdc06f50391fa8a073bbe923119de6f064d8bc0a7333b6f98c87d9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48958 Malicious code in @aio-commerce-sdk/config-vitest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 952a468e9821b0b8238bc9a6e6c0f9ee4964fca63e82403ed880279141fb5088 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in durablefunctionsmonitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cca6bcceee8fd7c48b4e3a6785a12fbee378528263f9f948def2884033173d3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48972 Malicious code in acme-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b71a81b10d7836d7a4aeb72b36d2d7c0a4c94e7697d47254dc9c15ecd803bb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48916 Malicious code in @jameson777/mytest2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94946f30715b082da6af0746769cd6b9ffb54774bf6c9fd71d59273de29fb357 The package @jameson777/mytest2 was found to contain malicious code. Source: ghsa-malware...

Malicious code in shopify-ruby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 974d73b54aa22ffaf8dfee7094b175bea558642ea43dda60cee5bc58b44ed17f The package shopify-ruby was found to contain malicious code. Source: ghsa-malware a529d693e0fe4a67a348d26b2117b4b314994f3378fa0ed92576c915cd5dccff A...

MAL-2025-48925 Malicious code in ews-paze-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 919f20823a98370aeff343ebdedbd1f86353649a1f852ec6c5ef7314925970d4 The package ews-paze-toolkit was found to contain malicious code. Source: ghsa-malware 60989a72103601dc11b185549de7abb4bdb1442776d790dab1945d25b5ab27...

Malicious code in mender-configure-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e954036412bb11454b4f5fb99bb6ac9b672d9b5542bdbaf870a9a0e20b444d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-42823

Name of the Vulnerable Software and Affected Versions TP-Link Omada Gateway affected versions not specified Description An arbitrary OS command may be executed by a remote attacker. An unauthenticated attacker can potentially execute commands on the system. The issue allows for remote command...

Rockwell Automation FactoryTalk Linx Elevation of Privilege Vulnerability

Rockwell Automation FactoryTalk Linx is a set of industrial communication solutions from Rockwell Rockwell Automation. It is used to communicate between small applications and large automation systems. An elevation of privilege vulnerability exists in Rockwell Automation FactoryTalk Linx due to a...

PT-2025-41916

Name of the Vulnerable Software and Affected Versions FTLinx versions affected versions not specified Description A security issue exists in the x86 Microsoft Installer MSI used with FTLinx. Authenticated attackers with valid Windows user credentials can initiate a repair and hijack the resulting...

MAL-2025-48320 Malicious code in react-tediter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbb4dfd10d5fb2961d7f32f3aa273844ef4a62f7eb9dc971e9213d5babb3e0a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48284 Malicious code in melichat-chat-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83c2d41e4c7fa96605141a046fcb172ffe601946ad931be7b5e96e935803c75f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48281 Malicious code in frontend-photoswipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e08a30dcf287f7992949bf9a4870c6201c42b3aa3b59e0966a677899b4bca376 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodelogex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54f45e13513bdb340726cc75dc48eff1e5840e2d95ef3ce626397fff25e6a46c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kpi-media-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b3bb2b9c205d4f8a38e5c5272fb0c10f8d0d0f12809f2e0a7b3d95f1ed5a17d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-2.4.0.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df1e3a4bb9401d121fd56de5fe7d0eafe40f656c5d8c4f61598a11a9e95b24f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48234 Malicious code in redirect-y8p47m (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e11d366d14416bd637177e4b235b111b0f0e833da6e30f09f11da13fedbcc77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...