Malicious code in @evo-tech/backoffice-test-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 931d6e176eaebf4b172dba6fd81800d7257f741ffad464c014dc9fcd085bcba4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48273 Malicious code in buyingflow-core-nav-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94b6cc0a729e266013937adc920cee3c7c57f6c4ef99bb5d08cc79e3e0ee9163 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in frontend-photoswipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e08a30dcf287f7992949bf9a4870c6201c42b3aa3b59e0966a677899b4bca376 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tw-webkit-universal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fbf2c831086ca3205f21c4113b6b26c6a3a854dcf9b56b72683b10995a7fe43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48276 Malicious code in cx-hub-interaction-ui-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a9bc1addddaee6ed4aa8352a5162c828bddcc53ddee490fb211f76247c23cd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48281 Malicious code in frontend-photoswipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e08a30dcf287f7992949bf9a4870c6201c42b3aa3b59e0966a677899b4bca376 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48284 Malicious code in melichat-chat-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83c2d41e4c7fa96605141a046fcb172ffe601946ad931be7b5e96e935803c75f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48277 Malicious code in dt-frontend-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d84c9e90fa62a28e4b2b22f78ffa732463fd6351f426e71f105661f00179e4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48271 Malicious code in advertising-charts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e0d648b7b4026cddfac170e95dee7ace2e607be7c21ce885f7ac237135e3478 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodelogex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54f45e13513bdb340726cc75dc48eff1e5840e2d95ef3ce626397fff25e6a46c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-5009

In Gemini iOS, when a user shared a snippet of a conversation, it would share the entire conversation via a sharable public link that contained the entire conversation history and not just the snippet...

Malicious code in react-outcome-error-alert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf316b6e96271df51ad30f147aa205bb372c306b2a929a854bafb68c41a5cf88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kpi-media-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b3bb2b9c205d4f8a38e5c5272fb0c10f8d0d0f12809f2e0a7b3d95f1ed5a17d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-2.4.0.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df1e3a4bb9401d121fd56de5fe7d0eafe40f656c5d8c4f61598a11a9e95b24f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-1.2.9.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9ee7df3c05d745488aab56d8e7e24dcc135b735d5f8b1f7a620b635e2d1514e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48250 Malicious code in mad-10.1.1.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43b7ae35d8522c82d7af230bc72f76eafab00194667d0a543b69f62c609e769b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-10.2.1.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edbba59677096ba6cb6e726feac84ffde07fbf44a251eaafd0502902b914b5f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48238 Malicious code in token_security_check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b62a85484e47dd76287cbde832200d5fed78a12b681c06710549f39f11bb433 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3j-io-ethers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adbbd3bde158787db574505a858f13ea34575b68e5b097210afebd82fd57aa73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2016-10792

AVTECH devices that include the CloudSetup.cgi management endpoint are vulnerable to authenticated OS command injection. The exefile parameter in CloudSetup.cgi is passed to the underlying system command execution without proper validation or whitelisting. An authenticated attacker who can invoke...