MAL-2025-3563 Malicious code in meridian-web-sdk-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 006fce4fe9c0fea36046fb81dea3e9c5c48c40c3bb4445001509862a068cd569 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3561 Malicious code in customprefix-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af67fc99b5f6993bf42c27c8c407c6bee3e97d0f412d03ab30533470b86339d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3544 Malicious code in ngsma-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d66dd7ffa0196bc96f1ec1da6ec107cb6a04b2e70051fb380771079b563581f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ngsma-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d66dd7ffa0196bc96f1ec1da6ec107cb6a04b2e70051fb380771079b563581f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3384 Malicious code in climate-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f1f505af92d5dfcdcfb8990f655cb13aa0ccaf3d7c00001658e3b12ca3a5080d The OpenSSF Package Analysis project identified 'climate-wallet' @ 1.2.34 npm as malicious. It is considered malicious because: - The package...

MAL-2025-3380 Malicious code in besec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8f4637511caaa8fbdf877671d4abfc117aa6ef86436b35652d7d1a842ac558a6 The OpenSSF Package Analysis project identified 'besec' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2025-3376 Malicious code in amazon-chime-sdk-js-exp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 41b8665f77f2bb83789c04cdd6973e2525d3af8609a0e4fc6f41e7b460eb1b51 The OpenSSF Package Analysis project identified 'amazon-chime-sdk-js-exp' @ 10.10.100 npm as malicious. It is considered malicious because: - Th...

MAL-2025-3407 Malicious code in my-rei-browser-shim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c686104ae598e6be85ee3b485920aef58f29d1ece0db3383bbca1afa64b8f405 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3399 Malicious code in freo-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8745e789b7b101fb7ede2f6f26567a39b6ec9522c2f6cad7f182098661442ced The OpenSSF Package Analysis project identified 'freo-design-system' @ 1.0.4 npm as malicious. It is considered malicious because: - The package...

MAL-2025-4172 Malicious code in digital-retail-falabella-unified-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 147f64482f11e5d69326b68fb5d8644d9df7c3073481cdac8e2b81176acfe6d3 The OpenSSF Package Analysis project identified 'digital-retail-falabella-unified-login' @ 1.0.0 npm as malicious. It is considered malicious...

MAL-2025-3508 Malicious code in discord-vc-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57a74516506d551102adff697246e1f0a75c62372b7d5eeedd8b4f2dca093bcf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3509 Malicious code in echo-color (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f49c42944e8358945b0e71cfb98fe50999b199d5f3e12802e35b84c9893c5c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3510 Malicious code in rose-bn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b255ebbe2f749770901182d7be69641b1f7e94bacd94fff31794262c33d998af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3295 Malicious code in bvr-api (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ed2a0f9c584ecfcffc1c76619a1637559d1d8771f78e1d3655f819f7fff67962 The OpenSSF Package Analysis project identified 'bvr-api' @ 0.3.12 rubygems as malicious. It is considered malicious because: - The package...

CVE-2025-31324

SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availabili...

MAL-2025-3511 Malicious code in test-kaks3c (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 591289fef82efe1b6a54e8948561a76e1e42addd4e1b62fe61364c894640b6b9 The OpenSSF Package Analysis project identified 'test-kaks3c' @ 10.0.4 npm as malicious. It is considered malicious because: - The package...

MAL-2025-3280 Malicious code in euf-ele-hf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a7cfc361d149da8b9d35ea0df759689a516eed93545d9966146e4652bc08aa2a The OpenSSF Package Analysis project identified 'euf-ele-hf' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Amplified Vulnerabilities: Structured Jailbreak Attacks on LLM-Based Multi-Agent Debate

Multi-Agent Debate MAD, leveraging collaborative interactions among Large Language Models LLMs, aim to enhance reasoning capabilities in complex tasks. However, the security implications of their iterative dialogues and role-playing characteristics, particularly susceptibility to jailbreak attack...

MAL-2025-3279 Malicious code in sprocket-webapp-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f5d57baf1c9d4921b97830956bc52be3915cbc7653c64569768d18c5583c845a The OpenSSF Package Analysis project identified 'sprocket-webapp-poc' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

MAL-2025-3277 Malicious code in studocu-extension-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b65c603a493cae2050aa25da30a9442d60b84baa80985df69af20af3e08fc9f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...