MAL-2025-32880 Malicious code in secure_identity_login_module (npm)

The package secureidentityloginmodule was found to contain malicious code...

Malicious Package

secureidentityloginmodule is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

Malicious Package

Overview All versions of secureidentityloginmodule contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and ke...

Information Disclosure

An attack technique against the W3C XML Encryption Standard when block ciphers were used in CBC mode could allow a remote attacker to conduct chosen-ciphertext attacks, leading to the recovery of the entire plain text of a particular cryptogram. CVE-2011-1096 JBoss Web Services leaked side-channe...