Malicious code in @s21games/game-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97dc8ad2adce2cd01d1a95cf1a8bc271babf0b372e1b04cf71a8938f8718aac1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47093 Malicious code in @s21games/game-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97dc8ad2adce2cd01d1a95cf1a8bc271babf0b372e1b04cf71a8938f8718aac1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-46997 Malicious code in codex-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9c0b0d3723aea4e9ace65a23c56b8f951b48f31f09558674bc6de5e788c8c7de The OpenSSF Package Analysis project identified 'codex-monorepo' @ 8.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2025-46986 Malicious code in mcp-server-everything (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 263d07d53076b8ca1efe56fcd69d4a4e3c6d6a496b6086a03b8bafb8ae58900c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-55824

ModStartCMS v9.5.0 has an arbitrary file write vulnerability, which allows attackers to write malicious files and execute malicious commands to obtain sensitive data on the server...

MAL-2025-46925 Malicious code in authzd-client (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 45ba3e72eb15bda66737b4c0b7addefe2fa72e79d4a38a82e9dd53722cc04f7b The OpenSSF Package Analysis project identified 'authzd-client' @ 0.11.10.r813fef313 rubygems as malicious. It is considered malicious because: ...

Malicious code in proto-education-web (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fe0791b8a3d9af1c4b04c567db2fc37ae9cbacd29a4ace0c5e07b75720f6c718 The OpenSSF Package Analysis project identified 'proto-education-web' @ 0.0.7.ref8a4ad331 rubygems as malicious. It is considered malicious...

Malicious code in proto-trust-metadata-api (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b87774d0bcfbcd33d81c38f3c6d26c986559b07bc1e15717164022afe4de346c The OpenSSF Package Analysis project identified 'proto-trust-metadata-api' @ 99.99.99 rubygems as malicious. It is considered malicious because:...

MAL-2025-46961 Malicious code in prose_diff (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1b4d01c12dfc0e3356a6e2613833c8afd50caee6c1cd2882fe4be1b84e182fdf The OpenSSF Package Analysis project identified 'prosediff' @ 99.99.99 rubygems as malicious. It is considered malicious because: - The package...

MAL-2025-46964 Malicious code in turboghas-client (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ad6c1ebcf6bfd3fd771aad2e5628f388059a1675ca82b4196ede826dd02e05bf The OpenSSF Package Analysis project identified 'turboghas-client' @ 99.99.99 rubygems as malicious. It is considered malicious because: - The...

Malicious code in mvnd (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d523f79a74314c8419942e259c5fc48634c3e75a90de8e0337b430df5a28392e The OpenSSF Package Analysis project identified 'mvnd' @ 99.99.99 rubygems as malicious. It is considered malicious because: - The package...

MAL-2025-46959 Malicious code in mvnd (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d523f79a74314c8419942e259c5fc48634c3e75a90de8e0337b430df5a28392e The OpenSSF Package Analysis project identified 'mvnd' @ 99.99.99 rubygems as malicious. It is considered malicious because: - The package...

MAL-2025-46955 Malicious code in monolith-twirp-pages-pagesdeployerapi (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 73a08935b8c380f8b7bb77b1d747d25a9af720bd5d30e375a9acc79ca14b82bd The OpenSSF Package Analysis project identified 'monolith-twirp-pages-pagesdeployerapi' @ 1.9.8 rubygems as malicious. It is considered maliciou...

MAL-2025-46934 Malicious code in monolith-twirp-odometer-core (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 559151bc8f149e686c1483fbc9ed476a900c5109a87ed60f413125cf9d178db7 The OpenSSF Package Analysis project identified 'monolith-twirp-odometer-core' @ 1.0.19 rubygems as malicious. It is considered malicious becaus...

Malicious code in monolith-twirp-snippy-snippy (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 48e4b752eb90b82df41239d8194646b9ab47b4e9e147dae4011c665a05d776b0 The OpenSSF Package Analysis project identified 'monolith-twirp-snippy-snippy' @ 1.0.4 rubygems as malicious. It is considered malicious because...

Malicious code in proto-dependency-graph-api (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ecf5eff888c8c4922c11f9e7129ce050bb6432ec890c9b527f97254b0cf92690 The OpenSSF Package Analysis project identified 'proto-dependency-graph-api' @ 99.99.99 rubygems as malicious. It is considered malicious becaus...

MAL-2025-46919 Malicious code in proto-dependency-graph-api (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ecf5eff888c8c4922c11f9e7129ce050bb6432ec890c9b527f97254b0cf92690 The OpenSSF Package Analysis project identified 'proto-dependency-graph-api' @ 99.99.99 rubygems as malicious. It is considered malicious becaus...

MAL-2025-46922 Malicious code in spamurai-dev-kit (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6809fd87c593e76bcb0bd4a719cab9e51e2d3b617f9a172d0a8a2f68a09474e7 The OpenSSF Package Analysis project identified 'spamurai-dev-kit' @ 3.0.1 rubygems as malicious. It is considered malicious because: - The...

Malicious code in actions-broker (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74e6328258aafc966c6b402300419e91c804d4e8986faeb14ef8419775cb13b5 The OpenSSF Package Analysis project identified 'actions-broker' @ 99.99.99 rubygems as malicious. It is considered malicious because: - The...

Malicious code in blank-hacker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fb7571808edafde35b1c18ed118dd2c5e38669d09a9b24f81de0d04d2af8617a The OpenSSF Package Analysis project identified 'blank-hacker' @ 1337.0.0 npm as malicious. It is considered malicious because: - The package...