CVE-2023-7241

CVE-2023-7241 affects Webroot Antivirus WRSA.EXE, with privilege escalation on Windows (64-bit and 32-bit) versions 8.0.1X through 9.0.35.12. The issue allows a malicious program to abuse WRSA.EXE to delete arbitrary and protected files, constituting local privilege escalation with high impact to...

Malicious code in actions-next-bundle-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a738c63046c2bd1588c1bcc21eafd03d28a480f73643ea8b429ff5fa00da78b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-3930

Name of the Vulnerable Software and Affected Versions Sparkle versions prior to 2.6.4 Description A security issue was found in Sparkle, where an attacker can replace an existing signed update with another payload, bypassing Sparkle’s EdDSA signing checks. This allows the attacker to potentially...

MAL-2024-1306 Malicious code in ethers-transactions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31d30dcd73ba06a4962c3e3b0419d5864aa9f93f1dcf516e1830eafa40f44ab7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1293 Malicious code in swift-docc-rendeeeeeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45e4d71b34d2eb0cd66dc9d19da997d325017d19687f304f39e1138fe0a0f0fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1264 Malicious code in trip-component-platform-online-usp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6a881b5f34acb08b303ac7f027ae585053ffab51b72cfa79a2bb4b4cbdf3f55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1255 Malicious code in deprecation-silencer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c51728830d7aed5b2134c0a91306e13560b271e8508376b3364616e35473898e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1265 Malicious code in viiiivek (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55cac2c796a655b4203b015952598ff85be425c2e7b0d0fd4ca5f15da45cb322 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1242 Malicious code in @lbnqduy11805/super-duper-train (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc4d86a2ccf9f0cabe4c1fad7282ed774c851e0c735abfecc81bdb5779f32f21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1225 Malicious code in @lbnqduy11805/potential-octo-enigma (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2278ac46e2dcc463150100fdf3e8757f162ae7088ed44798085eb277c8111a6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1218 Malicious code in @lbnqduy11805/friendly-doodle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 802b2dcf0e836c6a955cab90d444fba0aac8f4b098f5b7b1e19e1ab2b6fa3b2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1244 Malicious code in @lbnqduy11805/urban-octo-adventure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d937d187bef01b51396d89982c93f0a036dba08d273eb1b30e653e6536752d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1223 Malicious code in @lbnqduy11805/musical-doodle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2bf1c120201d0b0d2ed8c10342383c367cd31d727b4614560ac5086299ad860 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1229 Malicious code in @lbnqduy11805/refactored-eureka (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9955eeb79aa17ac958b0d53d6601bfed8cc4ddf71aa864e625a943add87224e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1234 Malicious code in @lbnqduy11805/special-funicular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e510788258c2e96a7ed65aec022cdbf449160441eb8756af374bb6c46e8b313 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1249 Malicious code in shuaiqiang (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90a14c62cc3d0883cc41fd87a7f5c977dfd73e615c410832cc0acbfd768d6b8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1211 Malicious code in tokenaddress (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9025a8419e068972440e8ce7318279901ab845fea1c593ecc34fda8d7f59122d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1206 Malicious code in f3ngtest12345677 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c45841bc7c5a73373ee4764c017a128bb5dd286d34d5d4a2bf649338aa1644a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1196 Malicious code in shopify-app-session-storage-prisma (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0afb06ef56cbaa2e3b7c09055beebdadea0360bb5c31b6745f6dee330ddab1d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iotnet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfce2833c5b3ba2b663b55cd3c22624573a6d5face271696869b0a3c779910ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...