PT-2025-42173

Name of the Vulnerable Software and Affected Versions nvidia-graphics-drivers nvidia-graphics-drivers-legacy-390xx nvidia-graphics-drivers-tesla-418 nvidia-graphics-drivers-tesla-470 nvidia-graphics-drivers-tesla-535 nvidia-open-gpu-kernel-modules Description The description does not provide...

Malicious code in bcoin-full (npm)

This package exfils sensitive data to a attacker-controlled domain via index.js. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 461f982127682ae24a143dec087c7d0d27c8c37ec4f549d4037e996508f66981 Any computer that has this package installed or running should be...

Malicious code in plugin-sitemap-coveo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8beb57037c74f45d85a7de2e8df9f414b56d2cece15a8004db4ebda4d5400ff6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in do-not-install-this-plz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adc3e11ee2ba7ba338bcea114510c201b2b2f788a4d1bb7d938a3c823353772c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code and gain full control over the system.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and gain full control over the system...

Malicious code in my-app-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3b688286528def3945fc6d678e314a2678fdddd35def920c64e4c311a29d416 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cdp-agentkit-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8d524f8c7995e353b380cc2c659b12067d589d4b56003ac355d9cc0736f8cd6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 32red-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7c76ac7d57265d4cc494b13ff1a0000ff8cbe225dea90e42a200545dd8359e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 000webhost-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 264677b0730aa71c63a8f92c073c2b8b7a14b4a54d291ebbe883161a4f8af43f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bounty123ay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 272a0c5cf3a56fbb91d5d2a6da53f4fd7be8ddc9385faecf02e97d7ec2f263dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in casino-luzern-easter-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e48867ff5b177606a9ae5bcb27cf273c464b77b0ac518170e08739c0f3f8f80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jekyll-doxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc397fffef5e9f788df267304bc1d6a1889066148532360fd247d8852cc0050d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in electron_npm_deps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4fab50ae8be78e8043fb45e594ddc2011c78115201e0697bcdf80e50f785a40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zkonmina (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a74c40ef671e2fb9d5956f1fd7f022e0dd1ca0f1da3602a687e9172cc4280fcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in keccak-crypto (npm)

This package is a starjacking attack which bundles a cryptostealing payload. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ded491472e4703368974a54f37663b29332b6a969e3e8fa8ccefec26d5b4c8a0 Any computer that has this package installed or running should be considered...

Malicious code in demo-resources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73030295cfc2df37061e6ab74ae2c0b2cea34184879e24b484012a578a9ed576 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in enimoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2cedad1fadd21b7b6c99f0def9324690726c81d00f809f1b4dd05bb31c9f655 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fulfillment-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c19040a72ca65c9502c155cab7a01ae2f4723cd94d87638a9df37539c4d79f21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crypto-puch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac46e66a58a4b83fff27b66b7372f575870fe1abb4ae286e8e1c46ba2109af19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in viz_schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49e689b8cfd5c43cd35b51823085d1f772fa517d58837f56093c7d699294fde3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...