Malicious code in with-next-intl (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d19de7a1f0382187b4331c426d9c88dddd8734112cac8bfd611c4edadf922ad Any computer that has this package installed or running should be considered...

Malicious code in n8n-nodes-zalo-vts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fde0db4909194d627bc8646a788c5ba6d8decf0fc37ee2ca5100a8560e85ced1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in icinga (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 624b17931789ef2a75976d64c2bca71890379a263f31df3d791a382040023d4b Any computer that has this package installed or running should be considered...

Malicious code in ee_else_ce (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1573503c97a28616ebbe0ac70f2124f6761b31b0ead756cc1b9e6a9b4a116127 Any computer that has this package installed or running should be considered...

Malicious code in data-layers (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67531c9bea415b9b319ff84e3899f3268e00ffa8cf9b11575043f70ace21ee85 Any computer that has this package installed or running should be considered...

Malicious code in application-data (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db3bf4666074d14ba6a27a4c7851e0abdd35a89b6c5f9833996d9d8b774fd2e3 Any computer that has this package installed or running should be considered...

Malicious code in commonjs-quirks (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcec4e4bf134e8db1b8066d669598fcc2abee6878c561780ea292d0ee6e9d0db Any computer that has this package installed or running should be considered...

Malicious code in i-just-f-hate-bananas-plz-dont-mind (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed1ddc36f47ef52c0cb79e772a23bbc635d435ea0029cddcc4ba60ea0a6ced5e Any computer that has this package installed or running should be considered...

Malicious code in phantom-labs-sandbox (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fd1e98be0b346737740a6114c37dc7dd21cd328f21d026e07d9eb0348e43464 Any computer that has this package installed or running should be considered...

Malicious code in profile-page-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5b881783112f2a7bdb2dbb9d4044a0127e3eecfa9c912d90cb85c22a80aa4fb Any computer that has this package installed or running should be considered...

Malicious code in acme-analytics (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 881763cab42ba018d4aa4b5c72fd9e6557ac88c0e0628608eb0c04c46de7e3cd Any computer that has this package installed or running should be considered...

Malicious code in hcbridge (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dae688c9eb2cc5ee5f91bb42f486ac35e0601f021e4019a9b671e616c823024 Any computer that has this package installed or running should be considered...

CVE-2025-49842

conda-forge-webservices is the web app deployed to run conda-forge admin commands and linting. Prior to version 2025.3.24, the condaforgewebservice Docker container executes commands without specifying a user. By default, Docker containers run as the root user, which increases the risk of privile...

Malicious code in eth-auditlog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aec778b05fe218b568dcb73221cdade5489641b92ce59e4baf3a6b50298bee0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-49842

conda-forge-webservices is the web app deployed to run conda-forge admin commands and linting. Prior to version 2025.3.24, the condaforgewebservice Docker container executes commands without specifying a user. By default, Docker containers run as the root user, which increases the risk of privile...

CVE-2025-49842 conda-forge-webservices Privilege Escalation Risk via Default Docker Root User

conda-forge-webservices is the web app deployed to run conda-forge admin commands and linting. Prior to version 2025.3.24, the condaforgewebservice Docker container executes commands without specifying a user. By default, Docker containers run as the root user, which increases the risk of privile...

PT-2025-25658 · Conda Forge · Conda-Forge-Webservices

Name of the Vulnerable Software and Affected Versions: conda-forge-webservices versions prior to 2025.3.24 Description: The conda-forge-webservices web app, used to run conda-forge admin commands and linting, has an issue where the conda forge webservice Docker container executes commands without...

Malicious code in azure-pipeline-filter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ccebaffafad34dc6e0db144fad37c055332951b9590769cbc852f2141a08d5a Any computer that has this package installed or running should be considered...

Malicious code in getsourcefile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44a69b03b0d5efbf48210cf0f786f2653910ba129aa89e00c5cd6a995f6ee9df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zora1abs-co1ns-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b206060bd52cecf8193f550d58c64d304f0f31ca11f58b0252f883bb574b41c8 Any computer that has this package installed or running should be considered...