Malicious code in bitget-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c98dc8a8cb993a1e93d89d0909e8243bfd607c7a635f098ee3b3c103101cbcbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2140 Malicious code in web3-2-alpha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b4594c9bb4674f2a9f165fc30fb2a0a4422504c322e19dae701700c87444fcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in morpho-blue-irm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28a07a377a39de069e4f8f9c05264041b94d825875b2f62cafd13decb74e43f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2099 Malicious code in celo-token-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0cd8cea412b5be8bcb5dbb9a84d39a233b5baf47fcc123dfdafc3905b7efa7ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.github-glitchenzo.nugetforunit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2641b4718102c38479e074fc167269436aadb2ff01a5b703a1c5e0a02fa09d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pkl-lang.org (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e62ea2ef542d2e8dda998bfe58ca7673af23732af531365aeb706076f9ea9fd9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sample-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce665e88f829ec81fed84869682431912fd05dda0ed950a4a37db218cc2c6673 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nncd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 728bd0a35f02971fda5e94d1102c6c85d388f47e770cee0da8f92e987cce94db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in learning-kotlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5560da3fe5e63bf7da20ae1cd458fd7999e279367f07227ce8a6019ca497dc87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SourceCodester Employee Management System 安全漏洞

SourceCodester Employee Management System is a SourceCodester open source php-based system for employee performance management. A security vulnerability exists in SourceCodester Employee Management System version 1.0, which stems from an incorrect manipulation of the parameter Full Name that can...

SMB Windows Full Build Number

Gets the full build number of a Windows operating system using PowerShell via SMB. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if descripti...

CVE-2025-1905: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. This affects an unknown part of the file employee.php. The manipulation of the argument Full Name leads to cross site scripting. It is possible to initiate the attack remotely. The...

Malicious code in orchestration-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 446d1cd4d99a7dc69f63cc5747ff882ba95bd3db160f5d500fe1711be4897d7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sonahri51/orientation-change-end (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4e5ffc2c48c12f6b36620be282c6ed94826d434430e8412d70a220d4719b366 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pages14.0.0_i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaed3f8870b4796bd4fc8667ec8911ddba466acaed945970ce6cf2f67e2630a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tim0310/fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 622f4e3ebf1f361078beffb0b92380f7658703123c9f9e0f86a053e8cf6c4dfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @f2p-mml-frontends/mml-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ede0cf36fe3863ea31a447c95853a9a95a8b926d51476470fdcbc2bedfeb2b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1688 Malicious code in @events-ui-toolkit/event-analytics-fetcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2e120c48fe02e1c6878623273ed3cedd8f066e1b4f6ad2d5c43a0f9c2c3ffec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v137 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfc8d0ae7cdda885edd8669c51b75a4698ae8bc337227cdc4cb1bf0cacaf7cfa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tg-shell-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38c69457497c0691d6d8e9fd41c25a9a61cbddbabee9cd66faa2d7ddc05045b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...