MAL-2025-48577 Malicious code in mender-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95b2a0aeb7e210157ad59facfa9c0e679873c34a71078e93e3410440365970a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deviceconnect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6c1a3984e1cb71a8f8426b3963787a49a096ce770bcabde9e63ca51fa5007e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48782 Malicious code in bad-santa-claude (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f3ae5211cbede196c8612c8e14c54147ab8c3984a6d1d26675336e526316bae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

XenServer Security Update for CVE-2025-58147 and CVE-2025-58148

Severity: High Description of Problem Several issues have been identified in XenServer 8.4 that may allow privileged code in a guest VM to compromise or crash the host. These issues have the following identifiers: CVE-2025-58147 CVE-2025-58148 Affected Versions These issues affect XenServer 8.4...

Malicious code in park-boost-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa4995e481e7e195eba9f71a64e7cfddf3fbcb8004d9eda6edb78c022875441f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yajusenpai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c8c389c2867c6ae1d774d817b2608a780eb5a86211df02b4197c62673097242 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-42175

Name of the Vulnerable Software and Affected Versions Flowise versions 3.0.1 through 3.0.7 Flowise versions 3.0.8 and later with 'ALLOW BUILTIN DEP' enabled Description The software contains an authenticated remote code execution issue and a node VM sandbox escape. This is due to insecure use of...

Malicious code in scr-web-production (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e603ee12cd5c70284024a104eb59fc914d86f04ad666bdf442253c0dd171ad4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48341 Malicious code in scr-cloud-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c714f60369d28f727a675effd525b4208077e225e46026b537d7606d48708a9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8136cf5c3645f0d663343578a6f6592474f35014323fd59a5cd067962473bb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48323 Malicious code in eslint-config-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8136cf5c3645f0d663343578a6f6592474f35014323fd59a5cd067962473bb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48280 Malicious code in frontend-metrics-collector-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33df4b3fc95229c6a1af21ef46dd94df8a0c7f647459b6b83dd1a92149afbbdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cx-hub-interaction-ui-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a9bc1addddaee6ed4aa8352a5162c828bddcc53ddee490fb211f76247c23cd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48107 Malicious code in redirect-0vaxnw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72efd6c5e73ed3ea9ace503b901d067b4f0f209399abd60fdc6681355af4cc2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-f72kyw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6107d344417e3c4484c0f17098d6f6be07c4eb5c33a23abe4f254b7180bf1c81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-ch5ayp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd5a7889bc409c2784ea3f069b4bff00c13364fc20515f0b46302aac192d52c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48121 Malicious code in redirect-4dcjkh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56aaf4e971350cafe1362295929439d58897e7b53bc937cc75d9c9dad9a7328f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-cuvccp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45100716d4ad002f1a6e8c6cde5c6f82e0b69ce9dcf848e37a123e187b8b263a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-ltlpoj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60e036fe612d489b34542b0ed229362f48d70c93f15f0854358ca3370e220afc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-fhelhf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 368f02b6ee060f7f28ab2779a2c2e2116d3da5c243b5c870030c2c63103d4fff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...