Malicious code in aristotle-fetcher (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67dee1184cd446a4663792d8dea9c58c14e9c2b9a64754d639a6af2b8c9dc9c5 Any computer that has this package installed or running should be considered...

Malicious code in @evoplay-spinential/poc-rce (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 881ba2020793547249c68ec29479655b8625af1152d08fd230ac0f6ad5dcc315 Any computer that has this package installed or running should be considered...

Malicious code in @evoplay-spinential/test-module (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad89d688671d0118dbcde38aeb62e434fef8e3cae3aed2f114f8553caecefa29 Any computer that has this package installed or running should be considered...

Malicious code in maxdome-compute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a03c0986aac72f989f747d0a8145d5753b02543abc7a3d934919e395c825ac42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zora-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5434c40d3048f846ef1d268e25b386ee6000460a939ff2aa2d91dd67ea1e897d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zora-hooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c7a760130bed2c2193278fce02d4a9955e74cc6644076d142f28e4cf8f85514 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zora-wallet-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2737a01b1cbbdc588edaadc6a0e02fe571afdcfe804c62a691270ab2e19eefd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-victim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfdba951804f9f995d7d98ea8a645ead6bc94767502ab6a7943133b5e34125f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-49182

Files in the source code contain login credentials for the admin user and the property configuration password, allowing an attacker to get full access to the application...

CVE-2025-49182

Files in the source code contain login credentials for the admin user and the property configuration password, allowing an attacker to get full access to the application...

Malicious code in volehai-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 695b1f1647ff88855017c178d47ab04527b14c3817e9b4ed343c1220cc7b18df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bs58-encrypt-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e93284d337753b93b8c896531454460484ca9f430906a64a7f06160cd7d354b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SICK Field Analytics和SICK Media Server 安全漏洞

SICK Field Analytics and SICK Media Server are both products of the German company SICK.SICK Field Analytics is software for evaluating manufacturing data.SICK Media Server is a media server. A security vulnerability exists in SICK Field Analytics and SICK Media Server that stems from the inclusi...

PT-2025-25306

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description The issue allows an attacker to gain full access to the application due to login credentials for the admin user and the property configuration password being stored in files within the source...

Malicious code in error-ux-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 476bc83dcd99575742060ce7a3f129b15a4da89c0605ae7b4eb57e4cef54bf8b Any computer that has this package installed or running should be considered...

GHSA-HQ9P-PM7W-8P54 pgjdbc Client Allows Fallback to Insecure Authentication Despite channelBinding=require Configuration

Impact When the PostgreSQL JDBC driver is configured with channel binding set to required default value is prefer, the driver would incorrectly allow connections to proceed with authentication methods that do not support channel binding such as password, MD5, GSS, or SSPI authentication. This cou...

Incorrect Implementation of Authentication Algorithm

Overview org.postgresql:postgresql is a Java JDBC 4.2 JRE 8+ driver for PostgreSQL database. Affected versions of this package are vulnerable to Incorrect Implementation of Authentication Algorithm allowing fallback to insecure authentication despite channelBinding being set to required. The...

Oracle-Based Multistep Strategy for Solving Polynomial Systems over Finite Fields and Algebraic Cryptanalysis of the Aradi Cipher

The multistep solving strategy consists in a divide-and-conquer approach: when a multivariate polynomial system is computationally infeasible to solve directly, one variable is assigned over the elements of the base finite field, and the procedure is recursively applied to the resulting simplifie...

Malicious code in truth-loop-server (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d367bf360c2776bacedd56615fcd53b1d0c2bdde9bc37e0e3407459bd7392e77 Any computer that has this package installed or running should be considered...

Malicious code in uiframebox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab2c616a224cb417f60cd79d4602b85a358e0d787a50cf44ad48b4be6d7a59f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...