Malicious code in deepcoin-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b109e03066101d06f96d699de95cc7de90f7fe2489c1728622e18d5b39de8d54 Any computer that has this package install...

0x-relayer-cat (>=0.0.2, <=0.0.10), 0xauth (>=0.0.2, <=0.0.6) +8275 more potentially affected by unknown CVE via elliptic (>=6.0.2, <=6.6.0)

elliptic NPM version =6.0.2, =0.0.2, =0.0.2, =1.0.6-beta.1, =0.0.1-beta.1, =0.1.0, =0.0.92, =0.1.3, =4.2.1, =6.2.1, =13.6.1, =13.7.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-VJH7-7G9H-FJFH...

GHSA-Q9W6-CWJ4-GF4P vulnerabilities

Vulnerabilities for packages: temporal-server, temporal, temporal-ui-server...

GHSA-248V-346W-9CWC

creationtimestamp| type| source ---|---|--- 2025-02-11 23:11:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3936 2025-02-15 01:10:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4516...

GHSA-9VFV-C966-JWRV

creationtimestamp| type| source ---|---|--- 2025-02-11 21:12:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3917...

GHSA-F7XF-F3WQ-RVR9

creationtimestamp| type| source ---|---|--- 2025-02-11 10:49:39+00:00| seen| https://github.com/advisories/GHSA-f7xf-f3wq-rvr9...

GHSA-389X-839F-4RHX vulnerabilities

Vulnerabilities for packages: keycloak, wildfly, celeborn...

GHSA-389X-839F-4RHX vulnerabilities

Vulnerabilities for packages: seata, knative-kafka-broker, wildfly, keycloak, zookeeper-fips, celeborn...

GHSA-5CCH-JR52-QFFH

creationtimestamp| type| source ---|---|--- 2025-02-07 22:30:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113964969301987255...

GHSA-QXH3-JGVH-X55J

creationtimestamp| type| source ---|---|--- 2025-02-07 18:02:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3797...

GHSA-C5J8-JXJ3-HH36

creationtimestamp| type| source ---|---|--- 2025-02-07 16:16:05+00:00| published-proof-of-concept| https://t.me/haj3imad/779...

Malicious code in pnpm-sync-api-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ff8a3208b0a7303df5e44ee0ec9bcc028b58bffe1fdabfbea89ab56a78cf841 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-648Q-8M78-5CWV

creationtimestamp| type| source ---|---|--- 2025-02-03 22:38:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113942353419505369...

GHSA-JP48-94WM-3GMC

creationtimestamp| type| source ---|---|--- 2025-02-03 21:49:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113942157415675948...

GHSA-R3FP-XR9F-WV38

creationtimestamp| type| source ---|---|--- 2025-02-03 21:36:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113942107867829427...

Malicious code in html-webpack-plugin-v5 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ed88e44f9e2966208907dcc8fd1b170e683aa017e8a706289a5bd2134e60f37 Any computer that has this package installed or running should be considered...

Malicious code in ar2-common (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2476bf9e09f2fab60aa1b305f5cedcd81dc097e566a795a082e951ebf6c620ef Any computer that has this package installed or running should be considered...

Malicious code in pkl.tmbundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b085480587244717534ecdcf4280b1dc0ed096c05f17455017033b4c0b5f3be7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-X9QQ-236J-GJ97

creationtimestamp| type| source ---|---|--- 2025-01-30 23:12:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3520...

GHSA-274V-MGCV-CM8J

creationtimestamp| type| source ---|---|--- 2025-01-30 18:12:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3500 2025-01-30 18:12:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3502...