MAL-2025-3551 Malicious code in express-validator-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67d1a336f4415ad211b6844d41de64f77697780083624b44fdeb0e5e9d4270ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3554 Malicious code in managethis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c683dca54122fc6e6b92b5c4b1b65e4fdb4accc582812cd422e28002c5166946 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in unified-login-url (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c824326fc0b6e80e3de9e7c838981c72c6b14fce17d41792db6a4e831bc8786d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3549 Malicious code in deals1flash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8dedaefeb09b39504c5df2e0817c5259711dd5afd429d887aef2a263a8cb1de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deals1flash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8dedaefeb09b39504c5df2e0817c5259711dd5afd429d887aef2a263a8cb1de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3557 Malicious code in redmins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbc5bc9b00f12ad85587941ac33154352652d85f6c05ec40ecdeb697b7dc20a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @baywa-re-lusy/nsemea-customer-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04cade6fe87118ba0ff073c78b84a484c6d2ec20889cf67ea74c255058b7d6e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nsemea-salestransaction-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 202c3434714473d68a43ed2c7365e4ccde3af7dfe6c2a93a2496b00b88304ff6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @baywa-re-lusy/nsemea-quote-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a970ecd3fffeb12875946cc0b4a9b9cbf2dd78228eda981cb2ad8316f22a2404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chalk-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5abfb3c6751ed538dfe27a650ca60f3526f4b93109eb8395da4e6b586efa0126 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3525 Malicious code in jsonpacks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac52c02d71a2abffc04dfdf50a9fe8a652c73d1e71d96a44e4c28275f19dd291 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsonspecific (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 429c7a9887c0f21c1ed1e71850a3cd3434fd578694e65fcdfdb60d7aaf896e13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3518 Malicious code in @reserach_org_jfhalsdhfkslsfds/metadata-collector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdac5e7b3dfde69cc9046dfd1dc40726d345da693e3e794e0b43727e4d8e4597 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in metadata-collector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d0c00e28320e5a836d89bb26152ff2b5c4989287285bb5071872ad3413821cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SFIBA: Spatial-Based Full-Target Invisible Backdoor Attacks

Multi-target backdoor attacks pose significant security threats to deep neural networks, as they can preset multiple target classes through a single backdoor injection. This allows attackers to control the model to misclassify poisoned samples with triggers into any desired target class during...

CVE-2022-39178

Webvendome - webvendome Internal Server IP Disclosure. Send GET Request to the request which is shown in the picture. Internal Server IP and Full path disclosure...

CVE-2025-25776

Cross-Site Scripting XSS vulnerability exists in the User Registration and User Profile features of Codeastro Bus Ticket Booking System v1.0 allows an attacker to execute arbitrary code into the Full Name and Address fields during user registration or profile editing...

Malicious code in turbo-bike-inspector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b2b7e282a4f78a18dbc7c28f2200bea91788bc176c9f76173a34af8ead206dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-online (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a64a01d4995610a37c1690ecaecc64be60f68c266b77ef1c80acceeb303ac71c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in needlecast_mvd_ads_site_client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61ce65a4d7678f6d84073ddd091e870fc620022fdb560eeec0138823d6ac0b74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...