Malicious code in mpochowskiserv (npm)

The package mpochowskiserv was found to contain malicious code...

Malicious code in testjm (npm)

The package testjm was found to contain malicious code...

MAL-2025-7349 Malicious code in @crabas0npm/ipsa-dolorum-numquam (npm)

The package @crabas0npm/ipsa-dolorum-numquam was found to contain malicious code...

Malicious code in gitarise (npm)

The package gitarise was found to contain malicious code...

Malicious code in font-filter (npm)

The package font-filter was found to contain malicious code...

Malicious code in transcrypto (npm)

The package transcrypto was found to contain malicious code...

Malicious code in iomarks (npm)

The package iomarks was found to contain malicious code...

Malicious code in charlie-mike-victor-taetl (npm)

The package charlie-mike-victor-taetl was found to contain malicious code...

Malicious code in zucchini-wo3-project (npm)

The package zucchini-wo3-project was found to contain malicious code...

Malicious code in @crabas0npm/quia-voluptatem-mollitia (npm)

The package @crabas0npm/quia-voluptatem-mollitia was found to contain malicious code...

Malicious code in @zalastax/nolb-_maxa (npm)

The package @zalastax/nolb-maxa was found to contain malicious code...

Malicious code in jobmeety (npm)

The package jobmeety was found to contain malicious code...

Malicious code in test-mlw2-viewy-poaka (npm)

The package test-mlw2-viewy-poaka was found to contain malicious code...

Malicious code in quartz-joy-now163-project (npm)

The package quartz-joy-now163-project was found to contain malicious code...

Malicious code in rainbow-kite-lum476-project (npm)

The package rainbow-kite-lum476-project was found to contain malicious code...

CVE-2025-2183 GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation

An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect™ app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root...

CVE-2025-2183

An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect™ app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root...

Malicious code in jenkins-trigger-action (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fedbad1242e09329c414a95c493ce62c39c15cad4472ef5fc4a8b9b836834fb4 The OpenSSF Package Analysis project identified...

Malicious code in c-monitor-dashboard (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f1ac5ace2c2268c16914bea284713d9bf69f2414d204cb79d4f32d8aa434b4eb The OpenSSF Package Analysis project identified 'c-monitor-dashboard'...

Malicious code in @googlesitekit/assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24f7823f5a513a40959c5bd9912593b27c89fb7f0d627ed9a66417d0f0707472 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...