MAL-2025-47212 Malicious code in texttweak-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 366586b816182bcde0c96a7b2ad0ba3388a1fb49629c3690d7d3c9e41f7b1dae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47207 Malicious code in stringmaster-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 903d35378ef4445c057cd090e43dfa9efdd364da38c3a11b6d993d6b9c91b8b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47209 Malicious code in strutils-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67b779503ade21852b913a6c223ddbe8a7f9bc17f95c81dd3f30ccca77ef1816 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in strutils-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67b779503ade21852b913a6c223ddbe8a7f9bc17f95c81dd3f30ccca77ef1816 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47206 Malicious code in string-setup-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bc9eeb3a1bc272c3b55d695ba0aa54a481cfb3ac6c0611bbaadd96cf5cb1935 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47191 Malicious code in mysql-dumpdiscord (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a71ef5bb0add3bd32fba8e827c6a43a6d7889f8a640286196a4a3057be865e1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47174 Malicious code in basic-pump-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc10b9f2bba8789f982dedfa26ff72ba0c4149b11d522b1d60523fac65c58419 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in http-req-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05b36301096608673130a0c0ca70710e71d19aa1f1b849b330ad9cc03911fcbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47180 Malicious code in http-req-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05b36301096608673130a0c0ca70710e71d19aa1f1b849b330ad9cc03911fcbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47203 Malicious code in react-prop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6aeb7200f91cbea0037b45eb8c0fde13aaa99f73bf5dc9fbf18eb696c70516d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47201 Malicious code in notifications-layer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 677b5044ded7f5957ada72fe05cf86d3176684af3552d5e59fe95c103dd03d1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v819 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d31ba534b4f8ffc55121d6aa3784d30b023a96d6b88430ea1445a9b838068562 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in middleware-loggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 572eeb4389dd6da0c13648478c40f302f15e7736279e3b33d171a315a2cac60d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eth-node-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43e3bae1d6be9bca527622368d2a291d97b40692ce8996525eefb78917c7e0de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47190 Malicious code in mse-eme-capabilities.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35ba0710a5c55a2abfbe4d0332047feccf4ef80e6d7d98203473d6eec8bd1d8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in snapshot-vks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26e927fc13301b02ce43be0a04b2937f258104c6daae954507111b28a5cb67a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-57392

BenimPOS Masaustu 3.0.x is affected by insecure file permissions. The application installation directory grants Everyone and BUILTIN\Users groups FILEALLACCESS, allowing local users to replace or modify .exe and .dll files. This may lead to privilege escalation or arbitrary code execution upon...

CVE-2025-7970

A security issue exists within FactoryTalk Activation Manager. An error in the implementation of cryptography within the software could allow attackers to decrypt traffic. This could result in data exposure, session hijacking, or full communication compromise...

CVE-2025-59016

Error messages containing sensitive information in the File Abstraction Layer in TYPO3 CMS versions 9.0.0-9.5.54, 10.0.0-10.4.53, 11.0.0-11.5.47, 12.0.0-12.4.36, and 13.0.0-13.4.17 allow backend users to disclose full file paths via failed low-level file-system operations...

MAL-2025-47053 Malicious code in bundleliep (npm)

The package bundleliep was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 340754ac2fb58c38b60047b573870d36d4e8ffae96845c4da4f96b2ac8a43d91 Any computer that has this package installed or running should be considered fully compromise...