MAL-2025-47992 Malicious code in incommincentives (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f82fa02afa9a50bf4a03e925b89a63789fd1df25ff1031b9e6598f16b3880e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2019-5022

Malware in sbrugna...

EUVD-2022-51534

Malicious code in bioql PyPI...

MAL-2025-6297 Malicious code in nonexistentgibberish (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b9dd1765a9029e224c537d8a52266bd425b43b63409e96f9d07755edf7ce3d7 Any computer that has this package installed or running should be considered...

CVE-2025-7772 Malcure Malware Scanner — #1 Toolset for WordPress Malware Removal <= 16.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read

The Malcure Malware Scanner — 1 Toolset for WordPress Malware Removal plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 16.8 via the wpmrinspectfile function due to a missing capability check. This makes it possible for authenticated attackers, with...

CVE-2025-7772

CVE-2025-7772 affects the WordPress plugin Malcure Malware Scanner — #1 Toolset for WordPress Malware Removal (

MAL-2025-5920 Malicious code in grafana-strava-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c38acd1154b6064c05313534795a57d0d6e586cc8ebd1a6a353b4ccaa3b27465 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5770 Malicious code in dex-core-v2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43ea4e0d3d0e8d1d1bedac44fc35d275146740cdf21e51a4328174bc6304e064 Any computer that has this package installed or running should be considered...

Malicious code in env-info-checker-kyy3w4fiurevd8uy43wfre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d6fb3feadb029e83e642c54a8ffc29782d65e981a2bd769dc972463231215b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5523 Malicious code in tools-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8430b3270cb2769c8afa5686cc7ed09d5be1fe3a5d680fd3887e3b2a1279e3f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in notification-logs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38d50a72b129f2bbf4413f253f4cc198bb674e07061123d5ba873a3374ed7ecd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5446 Malicious code in online-learning-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1edfb9c66a33f5e0185fe0ee1fb376f5a4f7974933a07e53f9e23d3281d4fe83 Any computer that has this package installed or running should be considered...

Malicious code in online-learning-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 853a4095a2f08a67260f3c2220bc45ef9484b10db0a4f909560bf36485cb54cf Any computer that has this package installed or running should be considered...

A Deep Dive into a Modular Malware Family

📢 Calling all Vulnerability Researchers and Bug Bounty Hunters!📢 🌞 Spring into Summer with Wordfence! Now through August 4, 2025, earn 2X bounty rewards forall in-scope submissions from our 'High Threat' list in software with fewer than 5 million active installs. Bounties up to $31,200 per...

MAL-2025-4803 Malicious code in @loybung/rdcw-slipverify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7639ec9b1c91e31de9ce47694aaa7659cfe7c15cd34c46e7ff2ab7eec1aed079 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blipkitgit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e899e9940707fc06d8dce8080f1ea4e59dbdfbb122526755ce4006c4e226d92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4741 Malicious code in educational-depconf-poc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8edb795d28942ec8fe6ea239625dc72e6a73b5965b8631c09f3544c800e54880 Any computer that has this package installed or running should be considered...

MAL-2025-4586 Malicious code in env-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 105ae811c2409aa9875948339815f7f362e64e01e0c82342286fba8de426878f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in admin-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c5cfce31b518acf3e531f6865cbc2434b5eacf844f1a47c768fa6d30bb15fc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4332 Malicious code in datamart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 585164112e040e876d8f0d759498f9e01a70eb003e68fcad9832949a0289ce10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...