CVE-2025-12223

creationtimestamp| type| source ---|---|--- 2025-10-27 07:19:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m45uw7eaao2o...

Malicious code in vulnerability-test (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in ajna-rewards-snapshot (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5ea81a48c03116271d6cc0fb54220dcc73b51b0ad8f01543f45365ec51c1de3 Any computer that has this package installed or running should be considered...

Malicious code in @aml-ark/demo-house (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e366f776aeaca182573ad2bf8f73e1d66803e0a13d1f4dc7f074f078b3cef347 Any computer that has this package installed or running should be considered...

MAL-2025-48688 Malicious code in helm-charts-monorepo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 927894d07d39eb62e7540bb7cb82999c513d6e9478109895a33f8d8027bae41d Any computer that has this package installed or running should be considered...

CVE-2025-10701

creationtimestamp| type| source ---|---|--- 2025-10-24 09:24:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3wkisipz22m...

CVE-2025-62236

The Frontier Airlines website has a publicly available endpoint that validates if an email addresses is associated with an account. An unauthenticated, remote attacker could determine valid email addresses, possibly aiding in further attacks...

MAL-2025-48693 Malicious code in internal-links-autocomplete-id (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in hyatt-album (npm)

Malicious package does system info exfiltration, arbitrary code execution via install scripts, and a suspicious version number. The package communicates with a domain associated with malicious activity...

Malicious code in hyatt-residential-roster (npm)

Package is malware. Collects and exfiltrates sensitive data to an external server. Suspicious install scripts execute the same script multiple times. The package communicates with a domain associated with malicious activity...

MAL-2025-48765 Malicious code in tps-lookup (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73fc3e3810086149d54c3870a4fc1976c9868f6995217b2b6e1db7bb7d20cf0e Any computer that has this package installed or running should be considered...

Malicious code in datadog-eventhub-forwarder (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in shutterstock-cli (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 293a07df288218d171e1132e93d24e0f6e75160174cf78ef8589073b1e7eb72a Any computer that has this package installed or running should be considered...

Malicious code in infobip-calls-showcase (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7a032e7c75c74d99948394ea2e689b4b0c7d679a0bec3adcf6f869a27cda5c0 Any computer that has this package installed or running should be considered...

Salt Typhoon APT Targets Global Telecom and Energy Sectors, Says Darktrace

The China-linked Salt Typhoon APT group attacked a European telecom via a Citrix NetScaler vulnerability in July 2025, Darktrace reports. This follows past US Army and telecom breaches...

Malicious Package

Overview zdachboostv3 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

⚡ Weekly Recap: F5 Breached, Linux Rootkits, Pixnapping Attack, EtherHiding & More

It's easy to think your defenses are solid — until you realize attackers have been inside them the whole time. The latest incidents show that long-term, silent breaches are becoming the norm. The best defense now isn't just patching fast, but watching smarter and staying alert for what you don't...

GHSA-RMJR-87WV-GF87 Mammoth is vulnerable to Directory Traversal

Versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth before 1.11.0; versions of the package org.zwobble.mammoth:mammoth before 1.11.0 are vulnerable to Directory Traversal due to the lack of...

Malicious code in isg-iwp-web-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd99ea1f73a0a8a60395dd908d6a970f8ab7861bec1eb627b70023c9716185ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-7304

creationtimestamp| type| source ---|---|--- 2025-10-15 09:06:57+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3m37vdav3hk2e 2025-10-16 21:02:36+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3dnrl7ciw26 2025-11-20 00:00:00+00:00| seen| The Shadowserver...