MAL-2025-4292 Malicious code in @act-platform/app-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3567b231d7c053086778a968fabe2174ddda3fff11c78d9973d2827aaef8d4e8 Any computer that has this package installed or running should be considered...

Malicious code in internallib_v370 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c10422740b7cbb39e0369e25a7deefc65842295a36c5fb7c6d10182737b2df8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in guardian-advanced-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13770fcd17968777cc4e0cab25b94ac990143f0e65b24dd910678e9b3f677539 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3626 Malicious code in internallib_v921 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2d85ca5bec57f8bdf71ccddd637037d50c3a8d215c375ab6bcfba881c336175 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eipsend (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3604c7d9351ed524566db2c93f9e4a9138606327e884352f93f2efab29494390 Any computer that has this package installed or running should be considered...

Interesting WordPress Malware Disguised as Legitimate Anti-Malware Plugin

📢In case you missed it, Wordfence just published itsannual WordPress security report for 2024. Read it now to learn more about the evolving risk landscape of WordPress so you can keep your sites protected in 2025 and beyond. The Wordfence Threat Intelligence team recently discovered an interestin...

Malicious code in doges (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 318e443cd5d84f016e8bfb0f1d2bafd4ccc2749c5ba81e01f0175207db159d06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3224 Malicious code in @bane-mlb/less-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 708683cc4aa7a9a8a3e4e44563d46dd000b74ea5738e4aa8885e7f40e6990a53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malwarebytes named “Best Antivirus Software” and “Best Malware Removal Service”

Horn tooting time: We're excited to say we've earned a coveted spot in PCMag’s “Best Antivirus Software for 2025” list, and been recognized as the “Best Malware Removal Service 2025” by CNET. PCMag’s rigorous evaluation process takes into account a range of factors, including real-world, hands-on...

Malicious code in healenium-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 789d69d0ca569bcae290e9b2b348366d669711d7cfefb0d5927e4bdc6e1f84e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in adult-content-detection-aws (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04c7da4fcfb4de71b19452af0a573b825658e46880b543cb625a25552b249fd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dir-tree-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e24acc439ef66f72887d3c3ea802bef5645428d0247a824fe61d4454840fdfa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2681 Malicious code in justinmimbs-elm-date-extra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11af7440e5eacd7d966f3a8948c08a28c29eff3b39493714c76c2deec71592cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ramp-tax-info-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0679be505671452e55b48549ce4c786016851ea54330a9bad829775f5c786c1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pixelary (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed6e04cfdf17df0b3303f51acdf9e0e128361f17eef5fa028f6bd70d3436984c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in accept-a-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d066801593b468617494b166d230eba3bfc7df3e454f9125333718ef42f6953 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-4173

A vulnerability within the malware removal functionality of Avast and AVG Antivirus allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avast and AVG Antivirus version 22.10...

Malicious code in wp-babel-makepot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d331165ce76baeaab9aa529ff1ad7c5ee9ce1f76032d4ea0db72ca744a2a0f76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in plib-ai-chat-response (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bb6968faa9c60fde77ecfd7899ac822b379eb1a2e677efb8b2cffb55c94c95f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bbm-enterprise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8adff756b9b1415f9a70c8273fea0bc9454bc3b33abb4efb2778559d480cdcb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...