MAL-2025-2394 Malicious code in newland-digitization-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35b5f032125648b5b2cad6fb57b4fcf1c6ab755e93b9ca9640fc85e041bed665 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2393 Malicious code in newland-component-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a4a9b55a483b5ec495bb5e9c06c5285932e3ff8eb091beee14345f52431123f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2395 Malicious code in nicegirl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05d61fc6a090b764666270f91b100bc166fbb85c0227ac947e1bdc876bc8e6a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2418 Malicious code in superdope (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9abd6ad5a2ad3503841de7c5ecf7e733d3b98b26b025f093b39f0424bc78fab4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2284 Malicious code in valentinesgiftt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c3e9e88211b3e2b0dfd9993c04491f26b66cdaece41f1d39f419686829270fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2280 Malicious code in simple-export-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d44defb42445d3a7511f32616401e72a003e6eee8f3e47cd2ca1f41b4026f65b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2084 Malicious code in @usaa-grp-ent-conv-platform/usaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4550381eb1d7dd406c17d74a80a2736538299a38d1956dab139285efbee4ad7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2133 Malicious code in upbit-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d286e3f82c3645432dde4b543a65c1f912bca545c3ad1abd486e8efd23bbde29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2028 Malicious code in @tim0310/fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 622f4e3ebf1f361078beffb0b92380f7658703123c9f9e0f86a053e8cf6c4dfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2045 Malicious code in minipay-minidapps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3aa1c34b617bec50d4bb5c5309a8e373ba9a96136b48f20077d41dff0205010 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1632 Malicious code in the-integrator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 407040848d5d3bcd09845998a95e5be8dbe90b173fdc0f2ea31185f801ffa84f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1490 Malicious code in modulous (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdabc10cd9ca2355a05df4fa5654942457a4635c6beeca4affd63d76ae733d11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1480 Malicious code in fohost (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 381794f08a206c0fe6726ea73aa3391fbf97c17ae26096768ee4fc054d2c007b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1247 Malicious code in ing-feat-oct-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7aba65afd05c2120b6f0e2c022b860bf8f5dbe756920055d1726f3f0ace973a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1121 Malicious code in facebook-pixel-wordpress-js-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3d88b8d260c2076030d62c623d5ba25ef3707962091c0e2a0c124f2610fd37d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1077 Malicious code in com.unity.services.core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 570e09325b7eeead7439db1cd6a223b5de2ddab48982af7bb43957a6c48d9069 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1097 Malicious code in cscropper-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03314c2593e63f6f953b281505c7a63eaa4fe7c3ffd71eb8fd8c28d5c1c16fd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-7695 Out-of-bounds Write Vulnerability

Multiple switches are affected by an out-of-bounds write vulnerability. This vulnerability is caused by insufficient input validation, which allows data to be written to memory outside the bounds of the buffer. Successful exploitation of this vulnerability could result in a denial-of-service atta...

CVE-2025-21494

...

MAL-2025-270 Malicious code in aem-spa-component-mapping (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96b1b3d4405a0ea27ac00cb9f96e4e70aa642f96018fa9b52508da4e98f1a6cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...