MAL-2025-1321 Malicious code in htx-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea59d9da68ae649dea49d1c6f68c1e0dffcd2bde5987416db10abf148ada4adc Any computer that has this package install...

Malicious code in gate-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0046474269613cb6d87e02edb5ec73480af91adb0db74829e2fe811fabd5eed1 Any computer that has this package install...

MAL-2025-1307 Malicious code in gate-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0046474269613cb6d87e02edb5ec73480af91adb0db74829e2fe811fabd5eed1 Any computer that has this package install...

Malicious code in bitfinex-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acf4f4f866fbab9eb346623bb4cf642c39a24b90eded6f7c82963b1ff3df25a9 Any computer that has this package install...

Malicious code in mexc-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b22d83fcc93875dbcefd9db5554e0bcab6c594802c953f58ce86d9abeee0838a Any computer that has this package install...

Malicious code in kucoin-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71c16b2a40914551c9e7bdae7a7e6470a1d514a17dcf036b355f308f456a42bd Any computer that has this package install...

MAL-2025-1297 Malicious code in kucoin-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71c16b2a40914551c9e7bdae7a7e6470a1d514a17dcf036b355f308f456a42bd Any computer that has this package install...

Malicious code in kraken-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de0bd6b283379718c5cc7051d586532589854100e79e3837ef82ba7ccbd61ace Any computer that has this package install...

MAL-2025-1292 Malicious code in kraken-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de0bd6b283379718c5cc7051d586532589854100e79e3837ef82ba7ccbd61ace Any computer that has this package install...

Malicious code in tokocrypto-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 669fb8f29120a04d7fb997d7f18b5243d5b90b46b614e108e35658c93a0a5e83 Any computer that has this package install...

MAL-2025-1288 Malicious code in tokocrypto-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 669fb8f29120a04d7fb997d7f18b5243d5b90b46b614e108e35658c93a0a5e83 Any computer that has this package install...

MAL-2025-1284 Malicious code in xt-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4620b4c964cef23c75cd0562eabb2ff4b07f79eaf1dc268af62da2dcf99ee307 Any computer that has this package install...

Malicious code in xt-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4620b4c964cef23c75cd0562eabb2ff4b07f79eaf1dc268af62da2dcf99ee307 Any computer that has this package install...

Malicious code in probit-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b90c84ef211f2f9ce83ee001f131dc0beaf0a6c6bf8667374fb9f14e54ae6fe3 Any computer that has this package install...

MAL-2025-1279 Malicious code in probit-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b90c84ef211f2f9ce83ee001f131dc0beaf0a6c6bf8667374fb9f14e54ae6fe3 Any computer that has this package install...

MAL-2025-1274 Malicious code in toobit-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbef733acdf5215bfdef9bb31af40ec7e1bd2fb0cab3167cf10876e9020e971e Any computer that has this package install...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nfsd: returns -EINVAL when namelen is 0 When we have a corrupted main.sqlite file in /var/lib/nfs/nfsdcld/, it may result in namelen being 0, which will cause memdupuser to return ZEROSIZEPTR. When we access the name.data that ha...

The vulnerability of the ScadaServer/ScadaServer/ScadaServerEngine/MainLogic.cs file in the SCADA system for developing automation control systems. This vulnerability allows a perpetrator to compromise the integrity of protected information.

The vulnerability of the ScadaServer/ScadaServer/ScadaServerEngine/MainLogic.cs file in SCADA systems for the development of automation systems is related to weak password requirements. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of protected informatio...

The vulnerability of the hnap_main function in the D-LINK GO-RT-AC750 router’s software allows a hacker to execute arbitrary commands.

The vulnerability of the hnapmain function in the D-LINK GO-RT-AC750 router’s microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary comman...

PT-2025-3194

Name of the Vulnerable Software and Affected Versions Zulip Server versions 7.0 through 9.3 Description The issue concerns an information disclosure attack where an unauthenticated user can determine if an email address is in use by a user on a Zulip server hosting multiple organizations. There a...