CVE-2025-21891

The CVE-2025-21891 entry concerns a Linux kernel ipvlan vulnerability where outbound IPv4/IPv6 headers could be read from skb->head if the network header was not in the skb’s linear part. The fix adds pskb_network_may_pull() calls for both IPv4 and IPv6 handlers (ipvlan_core.c: ipvlan_route_v6...

Malicious code in yxt-fe-center (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eefdd1eb0ce0a6fc7fac81b2bf725420903465a02f853bddcce53bb22c9463ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in adjksc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a36618278e7c8e1a27990dd6b85d8e183adad107bb6190beec5635aadd61451 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cdn-icon-fetcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f6e6ce42315c38bb4b79009fe96871dc66ebb2264708567c3fc78d6b96e9c73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in common-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43caad7fc7e071a9a295977f4f5d9598f9b33a58204f00a4c92cd94e855bb2b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sensort/mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfb2a761e35021c8cfca9951c826bdeb679e0667dae74308df6d84a5f3c10bbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kagi_browser_ext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d43b7fd2a47594e2b75e6634bd546cec8f3fb5d8c20181ce0f6ed15e368a91bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in my-signature (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e0bbf0594c1ce65a05bd238b874f3af6810ddb8729b2f913150d08d07f6a323 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RHSA-2025:1082

creationtimestamp| type| source ---|---|--- 2025-03-19 17:20:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8096 2025-05-02 17:16:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14537...

RHSA-2025:0900

creationtimestamp| type| source ---|---|--- 2025-03-19 17:20:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8096 2025-05-02 17:16:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14537...

Malicious code in tasks_mangement (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5af70a269afd5435306a85b902070f929d511d8855e369cc7c930a9dc50be50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tasks_viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21e1bcb65dac0ffae9b7b7e0f14570fa73511f72e91dc2ff7c600497e4d4f9a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gufferjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbff393230cefbf3e6640f0a2d849e0b31a4262a36abd587132d408356b7e594 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pendeck (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52144cad81187f6ac538b8ed921e0d500b9094449083bb6f7d408e5e7b6ba2d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0d7e92080b720d7d708537639734002025adb32846e183163eab64fed19c17e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cortex-app-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9950da8284056147d327094840e63fdfc2c18e870e14dc7dc8b260e9dc80ab1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in near-crossword (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1d0bfa084a2c49bd79b6bf04b30549426c23beb5a5c3feb7ace2146642b006e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in militaty-geza-blessed2025hondo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f68cc04dd7a67be9ecd2b61249ad24d3e6b39c02fd0195aa04d3e1652294da0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in you-test-vue5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec32cca6168cf6f67a5387e271049dd0d253af0be7055afd2b80f4d2fab43b0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-30066

creationtimestamp| type| source ---|---|--- 2025-03-15 05:47:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7671 2025-03-15 06:30:34+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-mrrh-fwg8-r2c3 2025-03-15 07:00:26+00:00|...