Malicious code in cosmy-wasmy (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52ae3c22beee95c306b386c69c33361301618a553e2920cf5fbde155626fc84f Any computer that has this package installed or running should be considered...

Malicious code in zora-wallet-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2737a01b1cbbdc588edaadc6a0e02fe571afdcfe804c62a691270ab2e19eefd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4793 Malicious code in lichess-db (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 475d752d815f7e78b4625da2eea3b8f39eab9a81a1fd93dd56d2d3aab31c379f Any computer that has this package installed or running should be considered...

Malicious code in knn-kdtreejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3117136c7dbf6c71fe3eced4aafbd5ea18b96272cc7f5aa5d58eccab6c8d17f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4773 Malicious code in zoro-gep-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31a52e159d0a3693023b3ef06e39e833dd2b2edbd49add25009006ba7800df90 Any computer that has this package installed or running should be considered...

Malicious code in bank-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f0763ca6a35d86ac26d0d79bf3170ea38a642062f030c19ac17589065a5e1c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4709 Malicious code in arc-offsec-custom-library6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05c0ad6a05bb523b5d5f58ae559288cd55c8c2019374a44703101d1efff52f1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4663 Malicious code in minimal-ts-webpack (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1cf4c25b4f12d9dcd4bc5b39db0936c0be665009239c28b85696d1a55fafa36 Any computer that has this package installed or running should be considered...

Malicious code in rosetta-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 223577bf445eef54d28cca3d3d2015b497b5c23838c938f2a48411440b05f614 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

U.S. DoJ Seizes 4 Domains Supporting Cybercrime Crypting Services in Global Operation

A multinational law enforcement operation has resulted in the takedown of an online cybercrime syndicate that offered services to threat actors to ensure that their malicious software stayed undetected from security software. To that effect, the U.S. Department of Justice DoJ said it seized four...

MAL-2025-4590 Malicious code in rest-icon-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1df42e0b9f4ff541c485fd5c4bb6ebabd85ce2a7aec08ffd4a6234650332ac9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4455 Malicious code in vnc-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b409d2b1ea3535147d71ddf23425fe3fe4d437ce0d5af96f32f80c094bccc009 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mix-hub-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f57bb12883c40162bea1eae604cbd15c20f2f0ca00416ccf4473be6447efd70d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2020-9077

HUAWEI P30 smart phones with versions earlier than 10.1.0.160C00E160R2P11 have an information exposure vulnerability. The system does not properly authenticate the application that access a specified interface. Attackers can trick users into installing malicious software to exploit this...

CVE-2020-0733

An elevation of privilege vulnerability exists when the Windows Malicious Software Removal Tool MSRT improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Malicious Software Removal Tool Elevation of Privilege...

MAL-2025-4122 Malicious code in rpc-selffbottt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3c07eac1a0d04e26728125d74f3c6943fc7234cd4412cb6daf896b3abfcfef0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4041 Malicious code in @abb-ux/commonux-web-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f22e30f31c7ac7adf96fb88b6ec251f1263a643a038b0fcba1db4b8ada61cb1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-191734 Malicious code in freelabs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4807374c9df366a20bb6e33eb5a4c7c8e1790cd10db475eb23c7ffa799c2e7cd Once imported, the package scans the disk looking for Telegram Desktop files and exfiltrate them to a hardcoded remote target. --- Category: MALICIOUS - The...

MAL-2025-3912 Malicious code in o7rcyti43qv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c285a13bb56b44cd12672ac267c4d3bd0c5633ae97d13d71fa83cacaf7a63807 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3845 Malicious code in neondatabase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73494ce92c6c9b63069dc80526292563ec3c1b787487708dd8a2fb0fe8c6a240 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...