MAL-2025-5933 Malicious code in lezer-promql-tree-viz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75c995399e97f574eb4cc3e4484bfabc69554ee170fa58d38740ba5d058568d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CGA-G395-3W3W-P3PP

Bulletin has no description...

MAL-2025-5487 Malicious code in @verrylinh/discord (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4318dae373846eedd4a261b1261f3bd9b820a4a0ce74f9e3adac51d403204428 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5479 Malicious code in webengage (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b526ee0b000536b84421cac42f7eaa62010d08785c0d61238fe4c3afe8a445d Any computer that has this package installed or running should be considered...

MAL-2025-5177 Malicious code in api-mojang (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c546cb9cfb37fc5b4a75a68896eb8c7cbd4d9be14ddfd39d74f9c47d42e86419 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DEBIAN-CVE-2022-49939

In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF of ref-proc caused by race condition A transaction of type BINDERTYPEWEAKHANDLE can fail to increment the reference for a node. In this case, the target proc normally releases the failed reference upon close as...

Malicious code in cascading-picklists-extenstion (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fa598a6ca358e662bbce1a99296fb4e87cfeb954903eed14989fd61bc8bf0db Any computer that has this package installed or running should be considered...

CVE-2025-6090

A vulnerability was found in H3C GR-5400AX V100R009L50 and classified as critical. This issue affects the function UpdateWanparamsMulti/UpdateIpv6params of the file /routing/goform/aspForm. The manipulation of the argument param leads to buffer overflow. The attack may be initiated remotely. The...

MAL-2025-4829 Malicious code in express-jscookie (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a039598d9f3f70e0ed6978355821d7e65491688a59a77f5167a54f7eb667437a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4715 Malicious code in fin-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef9a10c09cf18a155ebac430e436ab4c59017c72a1948cea3cbc1b70815cd8a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sasmeee/gamble (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c87f47f35d7c73fd035a897353adf49aa127f906c05e5bb8ffa791b9465d8f71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4672 Malicious code in @sasmeee/demoupload2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 010f01398a3d762a2f78d4620f4495c5cf865adc1d236a2c1b5f637a8429cf18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4667 Malicious code in checkout-sparse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f5576b93b0dbfc8f72fa10da0b8b43e6ba0e801c71d51807996063ee1f73f84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4655 Malicious code in procentry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5ac317d8398fc0737c7dd1e8d17c7a213e621acac767d7b3365195659ae4364 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4650 Malicious code in omise-woocommerce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 978dcc95cfdc2a3984742e165589b781c4f082929c56916182c817d9e30f08ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4640 Malicious code in blipkitgit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e899e9940707fc06d8dce8080f1ea4e59dbdfbb122526755ce4006c4e226d92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4607 Malicious code in @chatbot-builder/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ace9cff4af8d9323da0b8644083e75867baace24814284462f536c574065052 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4605 Malicious code in @worksmobile/wmeet-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f7e59ee05e9a26cf1609d57a7f477d90091a9aad3d2eb24673ece96f0addc5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4602 Malicious code in process-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca9b7f021303c59709dfd4a00e08e0c293215fade24f655e4fe0ff057ef40d4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4600 Malicious code in odin-security1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d86b20d8160d57b785f74b9bba211706cb3432a2060da273c1b876e3d2cfa39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...