Malicious code in my-local-b-off (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55183046ab5c00a4004d794bf477003beb964f8267681dcd3e19c8cc97c628f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2583 Malicious code in typespec-java (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d046f40bd24a36eef71000be2b720561f150cb503fc5caa2e9aa012fa1b0b884 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in typespec-java (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d046f40bd24a36eef71000be2b720561f150cb503fc5caa2e9aa012fa1b0b884 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2584 Malicious code in vscode-typescript-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9162b86c7482b306e1b5ef08b17ce67a14c45fbb9ae585e6113b17174fb27409 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cargo_metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9d3eedf8c61044a49ae7f685d71d0d2bb9188386501af2b6fe7d9b32960d6ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cmft-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7480b4348d595d2f3e0c25957e99041d6301f7e51593c0334345c1cdfe2a080c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in migu-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecb336887faf02039935f114ebb2564586a99bfe58a39d4ab59b3899818e1dc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in momo-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81d74db94da3274b3d9b70e5de7f5b926c9c1af17a6d2a6b733d63a4cbacdf41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in arnotest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64475736790097a8b2e30db87aa02796673e4a50b3af8e0d633eb261ec376983 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

dify 安全漏洞

dify is an open source LLM application development platform from LangGenius Open Source. A security vulnerability exists in dify version v0.10.1, which stems from unverified password reset code that could lead to full account control...

Malicious code in tag-soup-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c6f3d943d58e767428be21a9044b8969fbf56027da115be523bd13e0af23d36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethereum-cryptoshanye (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be8742e1d67fb9ff1c7a9bd22ac10cb8a783d566b7fab4834e661b94e0210ec3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2530 Malicious code in task_process (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1e7a5dfb4ee6d32aa4572b0a03173d625939980cce6bb4240f1f8412e4f2acd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gufferjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbff393230cefbf3e6640f0a2d849e0b31a4262a36abd587132d408356b7e594 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pendeck (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52144cad81187f6ac538b8ed921e0d500b9094449083bb6f7d408e5e7b6ba2d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2498 Malicious code in connectrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32796f9da1158707843036162228087fd1cbc5d6f03f92e8aa14168c96b07fa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2535 Malicious code in tokes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d5e2d95dad58403b31cf8453a2e412a16f561203b18d33a2f293979a75f9243 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tokes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d5e2d95dad58403b31cf8453a2e412a16f561203b18d33a2f293979a75f9243 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ex-edge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65081bd793c4f4c12132faabd6d0a64758adb672b65b0b21062dbf804396f80c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cbridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5753509b5d949697f65234a1cc2dfeeada8873e789415bda2717e17ccab338fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...