MAL-2025-190510 Malicious code in react-native-animated-shine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5050403e37c46819e95b4473ce0825d3dfe40bf8b41941ecd666e9b5048ffb14 The package react-native-animated-shine was found to contain malicious code. Source: ghsa-malware...

Malicious code in axis-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09aeea2ea73dbe2f884c0231d608d337880bb8bfd99f38837bb012f8f952eba1 The package axis-tools was found to contain malicious code. Source: ghsa-malware aa8f4e19cbedf81f11461e5e9017bd02d7135a5f126ed59b58b3669d6a7c8156 Any...

Malicious code in xo-shipping-change (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 194261ca5ce11a3a819c4aa938f33cd04d1089a614c0e1a224229efae8fc0edd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48599 Malicious code in vite-compiler-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4aae44a97a8da023c5a1e6a16ecf72e6213bbaeb5ec752ea9e903d15a1287d79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware Using Variable Functions and Cookies For Obfuscation

📢 Calling all Vulnerability Researchers and Bug Bounty Hunters!📢 🚀 Operation: Maximum Impact Challenge ! Now through November 10, 2025, earn 2X bounty rewards forall in-scope submissions in software with at least 5,000 active installs and fewer than 5 million active installs. Bounties up to $31,2...

MAL-2025-48420 Malicious code in curve-ui-kit-security-notice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fb2012407c0ff7c7e2c1a915c8ad608d1b47a31f725b9a9e68d652ad55bfcc8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in company-logo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3356f69fe3ebba321196add643af22e2daaff13de896d2ad82a6d79d9c381709 Any computer that has this package installed or running should be considered...

Malicious code in mad-2.4.1.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56c6fc06b90e0e637cc8ef419f8a5844e909deaf9cc68f1c73e231757e6f214a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48141 Malicious code in redirect-b9fv9e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46cbcba4fe58767d339f5ce87331ecf27d07989348ee1cd876592fac0f8678c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48111 Malicious code in redirect-1st7z7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 638828fbe37e3987211d30f184858e313c2d97580599b67ec562cd00ce90d942 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48214 Malicious code in redirect-sjcr8c (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1da0d4954d047b798675a52af826b4e894dcd3088d0199abbb6c906cc820d19d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48071 Malicious code in redirect-qrah57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db917c85b5931f7072dbd29e85df939cac604bc86e6fa7800a29defb2b716c00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48024 Malicious code in cassandra-driver-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 182b17f76b86dc9388eba3e01e07b1339a102abf6e265996a48913ca7379a6b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47992 Malicious code in incommincentives (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f82fa02afa9a50bf4a03e925b89a63789fd1df25ff1031b9e6598f16b3880e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2019-5022

Malware in sbrugna...

EUVD-2022-51534

Malicious code in bioql PyPI...

MAL-2025-6297 Malicious code in nonexistentgibberish (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b9dd1765a9029e224c537d8a52266bd425b43b63409e96f9d07755edf7ce3d7 Any computer that has this package installed or running should be considered...

CVE-2025-7772 Malcure Malware Scanner — #1 Toolset for WordPress Malware Removal <= 16.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read

The Malcure Malware Scanner — 1 Toolset for WordPress Malware Removal plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 16.8 via the wpmrinspectfile function due to a missing capability check. This makes it possible for authenticated attackers, with...

CVE-2025-7772

CVE-2025-7772 affects the WordPress plugin Malcure Malware Scanner — #1 Toolset for WordPress Malware Removal (

MAL-2025-5920 Malicious code in grafana-strava-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c38acd1154b6064c05313534795a57d0d6e586cc8ebd1a6a353b4ccaa3b27465 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...