Malicious code in helper-plugin-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 637e6aa11d35ac301a88fea209827ad1ebfe949fe5c2db4ffd66509975d13ef6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in amazonui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c91b2f8916dd3773cd2df6a060349b8291d8d10972f04e2d2fd9a00498b8273 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in adjksc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a36618278e7c8e1a27990dd6b85d8e183adad107bb6190beec5635aadd61451 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cdn-icon-fetcher-help (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c71170b5cf713c4abd33856c7cabcf76ea0e5141bc79c5d3a7fd74568d978aad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vue-official-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54297a016228c62dcc04040f8aaf8e680d35a868040c66105b3418e472d4fd67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-77CJ-RV5X-V6R2 FastChat open redirect vulnerability

An open redirect vulnerability in lm-sys/fastchat Release v0.2.36 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This can be exploited for phishing attacks, malware distribution, and credential theft...

Warning over free online file converters that actually install malware

The FBI Denver Field Office has warned of an increasing number of scammy websites offering free online file converter services. Instead of converting files, the tools actually load malware onto victims’ computers. The FBI warned specifically about that malware leading to ransomware attacks, but...

Malicious code in skinport-plus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19fd08e816a49e9680bab750bc6a7a68bcba51614fe279028ec2b888fca365f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in codebarrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c801f0c455ad24f1a8ae960118a1bf1dab534b8279e3429ac736dd113fee639a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ai-verify-shared-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f88a03bc9be981617ba8a71b55e2c7051d9cdf7397638bc7ec35ad84c17c455b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ts-alpha-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70c8f2ae0b7a59a7ccefbf9994c9b2bbfbdae35fc8a5e00813f91126eba04074 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-7614 · Unknown · Notfound Chaty Pro

Name of the Vulnerable Software and Affected Versions: Chaty Pro versions n/a through 3.3.3 Description: The issue affects Chaty Pro, allowing an attacker to upload malicious files that can be used to take control of a website. This is due to an Unrestricted Upload of File with Dangerous Type...

RevoWorks SCVX and RevoWorks Browser vulnerable to incorrect resource transfer between spheres

Overview RevoWorks SCVX and RevoWorks Browser provided by J's Communication Co., Ltd. contain an incorrect resource transfer between spheres vulnerability. RevoWorks SCVX and RevoWorks Browser provided by J's Communication Co., Ltd. build a sandbox environment isolated from a server or a client's...

Malicious code in kcex-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e06568c4c0cda180b68708e215ae0015dfc43a00abab40785f838241244c0989 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1432 Malicious code in p2pb2b-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a0473d0f0125406881ecf6afe601b962e4ebfb4dd7aee64effa8444f4a84be1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coinstore-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3246c34dc7546f998ef55a78bdc8d5cacd2b0ff40a89fa184dc0cc614cb2f4a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tbasdzqdl55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 839e4e7903c73d714b549caf9b44abb2b9e1167d17f45929dee4cdd4e28f17eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-47578

An issue was discovered in the endpoint protection agent in Zoho ManageEngine Device Control Plus 10.1.2228.15. Despite configuring complete restrictions on USB pendrives, USB HDD devices, memory cards, USB connections to mobile devices, etc., it is still possible to bypass the USB restrictions b...

Malicious code in cscount-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11a586cf9af033069bb8c5123c27f5256d0465223f1525db391bbddde56a6f88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.assetbundlebrowser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9cc638fbdda6e9a85e316d397fa90e5d3306ab3c17a078ce28307258664d6586 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...