GHSA-36H8-R92J-W9VW

creationtimestamp| type| source ---|---|--- 2025-02-18 20:31:23+00:00| published-proof-of-concept| Telegram/2uxF1qoFB3hlCxfLn3xIrN9O42tmrJDZ5kGfls8NVGPMqg...

Malicious code in bithumb-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 900f6956e80a6ac7b93daf1bae288b01fb928e3f80a3beb36d063cb44ebaf8f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-J588-583P-8QWM

creationtimestamp| type| source ---|---|--- 2025-02-17 00:20:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4618...

GHSA-M238-FMCW-WH58

creationtimestamp| type| source ---|---|--- 2025-02-14 19:28:53+00:00| seen| https://infosec.exchange/users/cve/statuses/114003891483235545...

GHSA-M4V8-WQVR-P9F7

creationtimestamp| type| source ---|---|--- 2025-02-13 19:18:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4319...

GHSA-HRRC-WPFW-5HJ2

creationtimestamp| type| source ---|---|--- 2025-02-13 17:15:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4288...

Malicious code in holahackerone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c18612fa91dc861c71f725e798c3acc7560a3f7735d2ec1291c3d90eec1f487f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ascendex-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 142a52b8be8d82df662a3eda8e1ac0eb272c5af8bda1ee499d710997621a8535 Any computer that has this package install...

Malicious code in deepcoin-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b109e03066101d06f96d699de95cc7de90f7fe2489c1728622e18d5b39de8d54 Any computer that has this package install...

0x-relayer-cat (>=0.0.2, <=0.0.10), 0xauth (>=0.0.2, <=0.0.6) +8275 more potentially affected by unknown CVE via elliptic (>=6.0.2, <=6.6.0)

elliptic NPM version =6.0.2, =0.0.2, =0.0.2, =1.0.6-beta.1, =0.0.1-beta.1, =0.1.0, =0.0.92, =0.1.3, =4.2.1, =6.2.1, =13.6.1, =13.7.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-VJH7-7G9H-FJFH...

GHSA-Q9W6-CWJ4-GF4P vulnerabilities

Vulnerabilities for packages: temporal-server, temporal-ui-server, temporal...

GHSA-248V-346W-9CWC

creationtimestamp| type| source ---|---|--- 2025-02-11 23:11:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3936 2025-02-15 01:10:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4516...

GHSA-9VFV-C966-JWRV

creationtimestamp| type| source ---|---|--- 2025-02-11 21:12:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3917...

GHSA-F7XF-F3WQ-RVR9

creationtimestamp| type| source ---|---|--- 2025-02-11 10:49:39+00:00| seen| https://github.com/advisories/GHSA-f7xf-f3wq-rvr9...

GHSA-389X-839F-4RHX vulnerabilities

Vulnerabilities for packages: celeborn, zookeeper-fips, wildfly, seata, knative-kafka-broker, keycloak...

GHSA-389X-839F-4RHX vulnerabilities

Vulnerabilities for packages: wildfly, keycloak, celeborn...

GHSA-5CCH-JR52-QFFH

creationtimestamp| type| source ---|---|--- 2025-02-07 22:30:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113964969301987255...

GHSA-QXH3-JGVH-X55J

creationtimestamp| type| source ---|---|--- 2025-02-07 18:02:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3797...

GHSA-C5J8-JXJ3-HH36

creationtimestamp| type| source ---|---|--- 2025-02-07 16:16:05+00:00| published-proof-of-concept| https://t.me/haj3imad/779...

Malicious code in pnpm-sync-api-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ff8a3208b0a7303df5e44ee0ec9bcc028b58bffe1fdabfbea89ab56a78cf841 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...