MAL-2025-4386 Malicious code in pdfplumber (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37f1840314016b3f29935e64789cd882de24a5544a6170ad4b123286942c5a56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-47636

The Pimcore Admin Classic Bundle provides a Backend UI for Pimcore. Full Path Disclosure FPD vulnerabilities enable the attacker to see the path to the webroot/file. e.g.: /home/omg/htdocs/file/. Certain vulnerabilities, such as using the loadfile within a SQL Injection query to view the page...

Malicious code in btcjs-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6dc89984b6c5d31e37a51eac0c9ebf6c3e93d8772938d44ac1051bffbda8962 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internalwkl-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 929f2a7e5622ef6954156300b8095508bdebc3f69573d35fdcdb9785504809ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in document-list-extra-questions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17f311a1014dd39c97963383ae0240c9ced38e74b96e8b880acd9c1bf8974c56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in client-microsite-reactjs-controls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e7614cd043fdaba853ac20fee4ef3aaa1ff2d0cc51534ca1ab3bc89a636d654 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in client-authentication-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0d83929fbddd1bff9fe89b82702a66c79d3e1f6f0fe19baa7379b58472005ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in creditkarma-us (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bba7bc1416730cab158c14c6e8071beae882a53599aafda45580844716a998a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4340 Malicious code in eslint-config-rth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ada83835d1a1d917e96a39accdde75a1be468e8f7c6dffdbe72b44e9941223c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in seatable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 534db55497a58d9007903dfa5dfe418fd37c2ab3ef4a8a47567e44e3a7ada101 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4391 Malicious code in rapper-wish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab0c771060f1519932c1a3aa17e1bb894fe76c1fc825c39a1abe9f76b77d5874 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bkwebportal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7c39ef0c973b66c8961eb724a9f266786f1ce3683c4f2f1925ade0f5e4d39c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in template-vite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06fbee942dbb167dc44c38bf807a7092a1ee1f59c1852062bb2ba0e3a22bc64e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hermes-inspector-msggen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c888d12bd2fd1107fe758f38e0e220f18fe717c6524edc4edc0478727a63bf6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in accumulate-win (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7d58450a0e39a1b76cf94a28abe87bc0d2378707501c80df577818faa471d52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coral-web-be (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21ed6f9e4fce7203c24af76e6440362a31f735ffb3344096dd9918a2f76bcf4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tenslots (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9f95166f5aa514f66ff9b0b93e38854038d01c0b74644b9e64aae7b2af17218 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-xterm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5f7c63ca98cf3df8c6642ac2a87eb6834e09162e30cd05b50172c8fa4f5cd32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4395 Malicious code in refreshrewards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a85c789c3376d220a18e3a4822d1d6b1b347866ec2f7306a35d970a6a6d3c0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kyutai-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6eef195dd7dc3e7a30a2bbebaa32b71e36fd4e6a7ad2a7d67ee776953ca7faa3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...