MAL-2025-48923 Malicious code in arno-baidu2-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 131a10e926c682b41b450810caef439af7c7137fa95422b58970a57ff2a2316d The package arno-baidu2-test was found to contain malicious code. Source: ghsa-malware 380635db26fa9fbaa70b78c6dba294a362a9342cb346a4f0542792c92b7cb7...

MAL-2025-48610 Malicious code in @aml-ark/ark-experience-byteplus (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b9a81d78ce8d8f1da9a31e80166834c3098ef03d5ef0e58e1a03d1d93418314 Any computer that has this package installed or running should be considered...

Malicious code in gamenodev21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eed42bff5f057d49a644923b46ba868c04890e51c77dffc911c3aaa0be4e0640 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mender-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7de3cf7258b50c3fd2233ed366fed6714e44da530255103d045c71406b2ea081 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48577 Malicious code in mender-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95b2a0aeb7e210157ad59facfa9c0e679873c34a71078e93e3410440365970a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deviceconnect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6c1a3984e1cb71a8f8426b3963787a49a096ce770bcabde9e63ca51fa5007e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48782 Malicious code in bad-santa-claude (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f3ae5211cbede196c8612c8e14c54147ab8c3984a6d1d26675336e526316bae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

XenServer Security Update for CVE-2025-58147 and CVE-2025-58148

Severity: High Description of Problem Several issues have been identified in XenServer 8.4 that may allow privileged code in a guest VM to compromise or crash the host. These issues have the following identifiers: CVE-2025-58147 CVE-2025-58148 Affected Versions These issues affect XenServer 8.4...

Malicious code in park-boost-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa4995e481e7e195eba9f71a64e7cfddf3fbcb8004d9eda6edb78c022875441f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yajusenpai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c8c389c2867c6ae1d774d817b2608a780eb5a86211df02b4197c62673097242 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-42175

Name of the Vulnerable Software and Affected Versions Flowise versions 3.0.1 through 3.0.7 Flowise versions 3.0.8 and later with 'ALLOW BUILTIN DEP' enabled Description The software contains an authenticated remote code execution issue and a node VM sandbox escape. This is due to insecure use of...

Malicious code in scr-web-production (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e603ee12cd5c70284024a104eb59fc914d86f04ad666bdf442253c0dd171ad4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48341 Malicious code in scr-cloud-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c714f60369d28f727a675effd525b4208077e225e46026b537d7606d48708a9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8136cf5c3645f0d663343578a6f6592474f35014323fd59a5cd067962473bb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48323 Malicious code in eslint-config-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8136cf5c3645f0d663343578a6f6592474f35014323fd59a5cd067962473bb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48280 Malicious code in frontend-metrics-collector-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33df4b3fc95229c6a1af21ef46dd94df8a0c7f647459b6b83dd1a92149afbbdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cx-hub-interaction-ui-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a9bc1addddaee6ed4aa8352a5162c828bddcc53ddee490fb211f76247c23cd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48107 Malicious code in redirect-0vaxnw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72efd6c5e73ed3ea9ace503b901d067b4f0f209399abd60fdc6681355af4cc2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-f72kyw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6107d344417e3c4484c0f17098d6f6be07c4eb5c33a23abe4f254b7180bf1c81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-ch5ayp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd5a7889bc409c2784ea3f069b4bff00c13364fc20515f0b46302aac192d52c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...