Malicious code in notifier-loggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c838abd608c5a94498f447a0d0421c940e32b2216a2b6357a45742c5dc29fc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jss-0.8.4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46d8111edf0983ef24837eb9f58a2a819f4c99f34a3243fddf898c0e4588f01e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in boost-chii-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a9518633beab55d7e221176d4550e41e83c9848a890b6ca4c77a384be7a2a17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vss-web-auth-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70dc7c0837db09d1f3b1d98483b9ce346b56d8ea5ae46ee6b2d974d8be75ea26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bombora (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c027bdb1bc55b07a5f9c2c6ffbb94c9842ba4bcc238041e873cbfe31ef4832d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SQLite < 3.50.3 -- CWE-190 Integer Overflow or Wraparound in FTS5 module

https://github.com/google/security-research/security/advisories/GHSA-v2c8-vqqp-hv3g reports: An integer overflow exists in the FTS5 https://sqlite.org/fts5.html extension. It occurs when the size of an array of tombstone pointers is calculated and truncated into a 32-bit integer. A pointer to...

MAL-2025-5852 Malicious code in @didi-pebble/pblint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb1531e6163d25b10b0a50538ba7b2462eea1da3199b5163aa90b8f5e4882e4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gmgn/app-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84805b96dd0a60155a6fa059a708837254facd211be9d7b614fae3a5fdeffa70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ltiditest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7d35f88e1e543875b9c6d67fea78b94b8d0b46dcbf2b73deef02424309a6275 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sfdc-ogs/v1-stable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cf5cb65e88f9911d818fe4538c2454d53d9f0bac558bc6bd8bb2f8f8146d2ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5842 Malicious code in colortoolsv2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35da23355879f7db0f986508b2d2540d9d12942545cab651d9b50a9312d074ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-31086

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw was identified in the Linux kernel's networking subsystem, specifically within the libwx component. The issue involves a redundant call to page pool put full page, which should on...

PT-2025-50550

Name of the Vulnerable Software and Affected Versions XWiki versions 16.10.9 and below, 17.0.0-rc-1 through 17.4.2, and 17.5.0-rc-1 through 17.5.0 Description The XWiki Rendering system lacks sufficient protection against /html injection. This allows attackers to achieve remote code execution RCE...

Malicious code in prospects (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3937cc0353b0952f14ff2d9e68216f857e4ffc01f688f600948c6d1b234915a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

gorobbs 路径遍历漏洞

gorobbs is a full-text search engine by letseeqiji's individual developers. A path traversal vulnerability exists in gorobbs 1.0.8 and earlier versions, which stems from a path traversal caused by the parameter filename operation...

Malicious code in dtcp-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d6735c1027226ecf96f1649634b0f5e6177c10f5cd381586d03cd9f38015d68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rita-remoteista (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ae4e995a07a4d4dde2738ea6213c272990a85dd9d4f6f3ff92eaff2cefd021b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5776 Malicious code in esign-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95776f5b7e274091b8f6f9a4fb620ad2a23f0b693413005faec7c8d348f97a21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in supabase-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d99002d0e83f91ca297ecb91950c973f76ba284c9b63eba89946e9bfac2672de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cookiefunctions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8afa900a1619d7588b19e54f31e967476f48fc0d956d06cd6dd045d965d36a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...