24141 matches found
Malicious code in spectrocoin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 290b36acd27bae687a488826038fdc7f97273030fd80026b3bd796793c70df5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2312 Malicious code in expect-violations (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d98ae6c06bd6b1cd2115956a382b7cdd4a1901560535df9f8284ef29cb6a4550 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Mozilla Thunderbird Code Issue Vulnerability
Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. A code issue vulnerability exists in Mozilla Thunderbird versions prior to 136 and prior ...
The vulnerability of the Thunderbird email client, related to incorrect import of OpenPGP keys from the WKD server, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Thunderbird email client is related to the improper import of the OpenPGP key from the WKD server. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
MAL-2025-2287 Malicious code in www-discoveryeducation-com (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b81d0d31dd0c1ad59b382392dd3309ca9d6ca9ccafde5ab54ee3c7a4c38fb20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2261 Malicious code in init-spa (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b819e1e4ec37a2916d54fc1cccc8d0a57a4c0fc53653d0caf06fe86826f0992b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2272 Malicious code in radar-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e3c3b76c65176007f3c376c09b22d085bc9fba8527c7b806acca53816e6cebf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2275 Malicious code in referrals-landing-page (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af44c1859de435203a802f9ebc54d261a9baa1c82b581c6735726c322cff737e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
This Malicious PyPI Package Stole Ethereum Private Keys via Polygon RPC Transactions
Cybersecurity researchers have discovered a malicious Python package on the Python Package Index PyPI repository that's equipped to steal a victim's Ethereum private keys by impersonating popular libraries. The package in question is set-utils, which has received 1,077 downloads to date. It's no...
CVE-2025-27650
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Private Keys in Docker Overlay V-2023-013...
Malicious code in testnet-contracts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edd3718e0e37096149d4d64985025d95be3edcd077f04cf23ed0165b2b8b8b8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Over 1,000 WordPress Sites Infected with JavaScript Backdoors Enabling Persistent Attacker Access
Over 1,000 websites powered by WordPress have been infected with a third-party JavaScript code that injects four separate backdoors. "Creating four backdoors facilitates the attackers having multiple points of re-entry should one be detected and removed," c/side researcher Himanshu Anand said in ...
Linux Distros Unpatched Vulnerability : CVE-2024-50301
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - security/keys: fix slab-out-of-bounds in keytaskpermission KASAN reports an out of bounds read: BUG: KASAN: slab-out-of-bounds in kuidval...
golang-fips: Golang FIPS zeroed buffer
A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...
MAL-2025-2158 Malicious code in @adminproxy/module-utils-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbdecb9253986cff5b752fb6e685010877c7e57ebcc7c19461ac03578f80b3c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2192 Malicious code in swerve-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6b1194d6641e2147013bfade0bd7f7e18dec7eb509797c7d004c43e2886e02d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2174 Malicious code in grafana-resources-exporter-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32638374c532240fe824d5d3467c0adbbf3fc762b0efc727f36fc93271e9933b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2176 Malicious code in innersource-sig (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad63dcd1fd3cabf0e50ad3470ccfe9c3e73d7cd254df8f86133563b829882b09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
