Malicious code in cbridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5753509b5d949697f65234a1cc2dfeeada8873e789415bda2717e17ccab338fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cortex-net-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96512fd61af9f52abfe7a5225778177477227fab3b55713c13a59076b32a0b22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cortex-app-tutorial (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc169aa56cb76eac4f5dab88f9b4a5d3293c0c051fd7f47b13891d7adfc43d7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in threshold-usd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7887627ef1c2e28caf3cf98b2540953646ef0ac35b627e28cb5fb961e072d327 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in defi-handbook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8160c8cc94eeeb56db2b1b93ced943ad36eaba53c64c82a994bda43d14ab4dc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in picl-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4b569262c76f6758ee536ea5f00045f5c221b872f6e159339281754d0551983 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.github-glitchenzo.nugetforunity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61726796c4ca9b58f4a90fb14b096634a49abd1ea591b2f740cecbc02d5cb0bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in invoiceitem-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b041bf4a504efbb1e6f970333e7ba49743c7774c0c441cd1e15a2f4bdd01789 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2513 Malicious code in invoiceitem-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b041bf4a504efbb1e6f970333e7ba49743c7774c0c441cd1e15a2f4bdd01789 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-30142: Authentication Bypass by Spoofing

An issue was discovered on G-Net Dashcam BB GONX devices. Bypassing of Device Pairing can occur. It uses MAC address verification as the sole mechanism for recognizing paired devices, allowing attackers to bypass authentication. By capturing the MAC address of an already-paired device through ARP...

OpenJDK 17 is now the default system-wide version of Java on Rocky Linux 9

An update is available for java-17-openjdk. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The 11.0.25 release is the last release of Rocky Enterprise Software...

Malicious code in you-test-vue6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fd4454397046cf8aeef6561fc90938310a1172cee3cbb872c07bbddcbe909ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2473 Malicious code in shorterapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f5eb942dbb6cb91bfe5e28567482dbc8642287b5e070aa027795d9bc79949d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-llama-cpp-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d27e255d94f63ec3b548fa8d9ba50b8565a5b534b5d4ea838571ef729ddec60d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dexter-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 004306bbcac485618bf220d12e4cf5870da6b06f07741f2efeb35b44ce3dd9da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2475 Malicious code in snap-design-system-marketing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41a0edf987afa7aec8736b2683c5bb597fe53fcddad3dddbc3ea1074e252e8b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in key-lister (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f9c33eb066fce6253ba86498debbec8fe000ace68796a6bddf5d95e431551b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dev-debugger-vite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 836268a49761be0bbcd6dd89283cbaceea33d8ddf28b8fec0ca5337c318eba52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in newland-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a04bb2785a6c11b6ba7677d8347c662a121ca7d3a53217aed73a2529cb11902 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-rekilog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 249b037c6c199bbd9807077e5d7c285f8cb8525f43754d5ddb10263cb35fae39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...