MAL-2025-3190 Malicious code in highcharts-mouse-wheel-zoom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd3e7a1a5ccec6d7ad964e3183a5e78bcfd9722281b8205094e72ffcda8c26d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cors-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c69784e687ee2d3b4fa3c9466d05fee6ba509336504718d4b993d75c7498176 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3181 Malicious code in data-memocombinators (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 392ef8199fed690581519bcc38f5cb1dcc29af2196b24b72a3c21df826f531cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in esy-m4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d50f3c1994b8efe53e778d8ba331e1ceec48993b57b0fc3f279eb3f4b9dea361 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-27078

A vulnerability in a system binary of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to inject commands into the underlying operating system while using the CLI. Successful exploitation could lead to complete system compromise...

Malicious code in typesense-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 490e72092d3e2b725ff92c6b8bb87fb850509bdd1abbead8e8cb9427a4d92bcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in native-bottom-sheet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5711622e2e816e2ae9f09b95daaec1ec3a4d06831cc5c627ed897fbf2c72ee2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3175 Malicious code in nucleus-form (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef4a82fababc58d4330f2cc60c17200d50ca1501934c59e081fd469d18282173 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sasha-web3-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 711d644ee70ae236cbeb74d5b102ac46509d387f35a091ac6c791d10ba0fda60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shiroisthebest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e179d4c7188e5eef682908b39cf158311b927536dbae3793020d6d668fb834e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in n11-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cafa63b85d8dc16cc6ca209e28fe286eb8193d6d25a4d9d73ea7ec2c4b82c25a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rlusd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 629e6d48825f1e58a7575a37bc976ac9d955d1e6b0a8a3782539fd168ddc570e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in amazonui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c91b2f8916dd3773cd2df6a060349b8291d8d10972f04e2d2fd9a00498b8273 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2025-29072

An integer overflow in Nethermind Juno before v.12.05 within the Sierra bytecode decompression logic within the "cairo-lang-starknet-classes" library could allow remote attackers to trigger an infinite loop and high CPU usage by submitting a malicious Declare v2/v3 transaction. This results in a...

PT-2025-14872 · Elaborate Bytes Ag · Virtual Clonedrive

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns a kernel driver that is accessible to low-privileged users. This driver exposes a function that fails to properly validate the privileges of the calling process, allowing...

BIT-JOOMLA-2022-27911 [20220801] - Core - Multiple Full Path Disclosures because of missing '_JEXEC or die check'

An issue was discovered in Joomla! 4.2.0. Multiple Full Path Disclosures because of missing 'JEXEC or die check' caused by the PSR12 changes...

Malicious code in whatwg-node-fetch-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1f59eebf54f348e9ae3e94af39368c59899516438f8b029e4db2d91f075ac95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in start-state-machine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 817dc6cbfa89267c683591874924c9aaf14005ca7e5da82c2d7ee55fccb52c76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jcl-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5db8fba1d3af4871fe70fb88d7eef37a6740477ddfe683e8258afa4345d7055 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bmw-fedev/auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aaf1cfd96aa6434cb73b22f2e38fda0979e7847fff11c575bd67ea8e2f09c8f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...