Rockwell Automation FactoryTalk Linx Elevation of Privilege Vulnerability

Rockwell Automation FactoryTalk Linx is a set of industrial communication solutions from Rockwell Rockwell Automation. It is used to communicate between small applications and large automation systems. An elevation of privilege vulnerability exists in Rockwell Automation FactoryTalk Linx due to a...

PT-2025-41916

Name of the Vulnerable Software and Affected Versions FTLinx versions affected versions not specified Description A security issue exists in the x86 Microsoft Installer MSI used with FTLinx. Authenticated attackers with valid Windows user credentials can initiate a repair and hijack the resulting...

MAL-2025-48320 Malicious code in react-tediter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbb4dfd10d5fb2961d7f32f3aa273844ef4a62f7eb9dc971e9213d5babb3e0a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48281 Malicious code in frontend-photoswipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e08a30dcf287f7992949bf9a4870c6201c42b3aa3b59e0966a677899b4bca376 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48284 Malicious code in melichat-chat-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83c2d41e4c7fa96605141a046fcb172ffe601946ad931be7b5e96e935803c75f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodelogex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54f45e13513bdb340726cc75dc48eff1e5840e2d95ef3ce626397fff25e6a46c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kpi-media-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b3bb2b9c205d4f8a38e5c5272fb0c10f8d0d0f12809f2e0a7b3d95f1ed5a17d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-2.4.0.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df1e3a4bb9401d121fd56de5fe7d0eafe40f656c5d8c4f61598a11a9e95b24f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48234 Malicious code in redirect-y8p47m (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e11d366d14416bd637177e4b235b111b0f0e833da6e30f09f11da13fedbcc77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-95fl17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e955a8cbe02f2173f17135fd31afc9d73eedf79aa1b7d79afb77f906d60f6c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48145 Malicious code in redirect-cn040w (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25a017e32cbceb0365c659a0fc3f0649a71d0b52774c3d8002bcc808baa4d086 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-rrfeb9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e22ca9cad1ad3c1542f31911a710cdf8050641c411840a91fa44f7f81ba3fd36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @testcarrot/supply8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62090c615c296faaa4c5b5daeca903ff5f30ce22e263e583ed7b697159fb17dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48095 Malicious code in @testcarrot/supply1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 517d985985f415a1c4c91f10bdfc1757c72f7331c1f00d61ef96d902603783e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-qrah57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db917c85b5931f7072dbd29e85df939cac604bc86e6fa7800a29defb2b716c00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48032 Malicious code in mkto-flow-lookup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c904169f3ea79a27da86e03cee022e92ff39831a877f13f17594bfe89ffab7a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48036 Malicious code in pyjwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1303df275ef90069cbd133d9486d1bd0732a401442c275a2c1ca4765fa940d5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48002 Malicious code in poolcake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bb8f867e9caffbce415671d637f82bc49a3097df8d2cb5c3a41e464419a91e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48010 Malicious code in unitest2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aed7fa383be13086f76d33ea8cf0fb7262464155423ce6c74e8f46c1bf69f6fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47971 Malicious code in acme-auth-utils-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 381bf10b2439022678c5ee610a1ef1f66a302de861937b7237aaafb4e83d7aba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...