MAL-2025-39589 Malicious code in xaver-kemplang6-sukiwir (npm)

The package xaver-kemplang6-sukiwir was found to contain malicious code...

MAL-2025-9932 Malicious code in @zalastax/nolb-_digs (npm)

The package @zalastax/nolb-digs was found to contain malicious code...

MAL-2025-19940 Malicious code in everest-fjord-rtr735-project (npm)

The package everest-fjord-rtr735-project was found to contain malicious code...

MAL-2025-9791 Malicious code in @zalastax/nolb-_aws-c (npm)

The package @zalastax/nolb-aws-c was found to contain malicious code...

MAL-2025-40673 Malicious code in yurt-wasabi-va7c (npm)

The package yurt-wasabi-va7c was found to contain malicious code...

MAL-2025-36992 Malicious code in tmcvid (npm)

The package tmcvid was found to contain malicious code...

MAL-2025-9916 Malicious code in @zalastax/nolb-_devc (npm)

The package @zalastax/nolb-devc was found to contain malicious code...

MAL-2025-7349 Malicious code in @crabas0npm/ipsa-dolorum-numquam (npm)

The package @crabas0npm/ipsa-dolorum-numquam was found to contain malicious code...

Malicious code in @zalastax/nolb-micro- (npm)

The package @zalastax/nolb-micro- was found to contain malicious code...

CVE-2025-2183 GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation

An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect™ app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root...

CVE-2025-2183

An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect™ app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root...

Malicious code in jenkins-trigger-action (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fedbad1242e09329c414a95c493ce62c39c15cad4472ef5fc4a8b9b836834fb4 The OpenSSF Package Analysis project identified...

CVE-2025-2183: Improper Certificate Validation

An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect™ app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root...

Malicious code in c-monitor-dashboard (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f1ac5ace2c2268c16914bea284713d9bf69f2414d204cb79d4f32d8aa434b4eb The OpenSSF Package Analysis project identified 'c-monitor-dashboard'...

Malicious code in @googlesitekit/assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24f7823f5a513a40959c5bd9912593b27c89fb7f0d627ed9a66417d0f0707472 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Soco404: Multiplatform Cryptomining Campaign Uses Fake Error Pages to Hide Payload

Wiz Research has identified a new iteration of a broader malicious cryptomining campaign, which we’ve dubbed Soco404...

Malicious code in npmdeco (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7c7110ed52ce1bc50ece55d4ed6f010f23d0ec5383c3b482208028e97eeab9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vss-web-auth-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70dc7c0837db09d1f3b1d98483b9ce346b56d8ea5ae46ee6b2d974d8be75ea26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tw-core-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware effb17ff1202bd8522ed8a37591dc22da8c39ed2554771c3566b2ac7d4e356f2 Any computer that has this package installed or running should be considered...

MAL-2025-5784 Malicious code in intel-telemetry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98424c889e7b3842b903e643f3e36c9dba3b84245b5d597fa8f60ea464e79ee2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...