MAL-2025-1904 Malicious code in my-node-startup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb8ec8a8489c99789cfcd7c441e3dd1e95c4380a18f1e53144de9f58cd025b7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1775 Malicious code in common-typeface-termina (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 193842681a528ea3a616187f7dff355372eea1f8144257cc73c7d73d9b859318 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bindbc-sdl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c73f8013f05d5127ca295e1eba72f72fbc8ced29dbb5f27663588e7150c3d1db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ossar-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8bf6218656218d743c04b66e989f4f9615fcb7727df4d40cc13d4dc4135a4cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in common-typeface-termina (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 193842681a528ea3a616187f7dff355372eea1f8144257cc73c7d73d9b859318 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stripe-sample-accept-a-card-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9df31417aaee6da47501df51c7b5f60b6d64285d452187a4165e703683ff2f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in consumer-platform-global-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 673a0b607ba1bc6ba23ef4cb90ce7b66e03db02b377733960c524cf6757b4c61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in snap-design-system-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bad4c0b89835a8fe7ca332902590a3ace5d2889d12e2d3cde10ee5dc5c695d54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bahamazing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f74a7acba34cff5cc3fc70e44b94822e3fbf03bed544068a6d96b4eb4f9b067 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in metrics-aggregator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cd896083dc19fbe781ed9f414bc1a72581378e63717086f459e1b03fd0c058c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ocular-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 948b2048674d1a1a44146f84c535c4078ce37a6108876e974d3db58b06f183f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in local_editor_top (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76950599e5b37eafb90ddff61774b4fc890522176ea70d8e9b18b99b7545f9ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in onyx-ssi-sdk-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46a5cdb0edf65e0650f15c2a00e379442b620823ea1ed315afb6946edc3a4268 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Server-side Request Forgery (SSRF)

Overview org.webjars.bowergithub.axios:axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF due to the allowAbsoluteUrls attribute being ignored in the call to the buildFullPath function from the HTT...

Server-side Request Forgery (SSRF)

Overview org.webjars.bower:axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF due to the allowAbsoluteUrls attribute being ignored in the call to the buildFullPath function from the HTTP adapter. A...

IBC-Go has Non-deterministic JSON Unmarshalling of IBC Acknowledgement

Name: ASA-2025-004: Non-deterministic JSON Unmarshalling of IBC Acknowledgement can result in a chain halt Component: IBC-Go Criticality: Critical Considerable Impact; Almost Certain Likelihood per ACMv1.2 Affected versions: IBC-Go = v7; Earlier IBC-Go versions may also be affected. Affected user...

Malicious code in pp-react-content-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8280f253e75704177d57797625fe0d81836b0ae85c09ebbc58cdbec1b2a5b4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in the-integrator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 407040848d5d3bcd09845998a95e5be8dbe90b173fdc0f2ea31185f801ffa84f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in keymakerclientapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 544396b6dec8b769c83bad34338116bb792c077804b613a9e95f2584e2272892 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in findomestic-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 731a944111d653908b4d57be5f92681aa2954a42a4ddea0169b05c3aca65a7c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...