Malicious code in ascendex-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7d0c8803a00a9ae99435e647d34560b1abbd7f2916cf052fe47e842e7b6a407 Any computer that has this package install...

CVE-2025-0108

creationtimestamp| type| source ---|---|--- 2025-02-12 16:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2025-0108 2025-02-12 18:35:47+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113992358068909630 2025-02-12 19:03:23+00:00| seen|...

Azure Linux 3.0 Security Update: kernel (CVE-2024-42072)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42072 advisory. - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix maygoto with negative offset...

Malicious code in nebulagl-h3-hexagon-editing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbf7cb7b134f7a3699367939a1d01f6863a30cbc599d8973b3c57509cd51c9b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v185 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8939bc2acda7e18713b6ff48ec41b70f18201a851beeabecd0e544cfe80430c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in example-advanced (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe22841f48a20657900f7b7c76268c6243981bb55e440bc22345c6b8831d42f6 Any computer that has this package installed or running should be considered...

Malicious code in facebook-pixel-wordpress-js-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3d88b8d260c2076030d62c623d5ba25ef3707962091c0e2a0c124f2610fd37d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in type-on-strap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb7c3c0201aafc369ec9ca67cd6610fafdf472d7be2ea007f687c0cdc3e9e62f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ppcp-starter-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90fda43d3ca785bdaecbd26f9143892e80c2dc56f94e46c333ea5b60b32da983 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in l10nmessages-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f1e60904c0c6aefd351077e69c73dc8cd979abf7e331a1311369fca1e7b40e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in arrayref (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 173d873a752e33bfa5cdeb3ccefd21028e662401f7fb6fa22831d99eb490c3cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dbc-wiki (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a3387dd8d7bee056ed8730751ff10c6b9a5de16814de6072bf8325f339108a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in alex_v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd7f71d2055970bf8d5dfd581a79586d21cbce83f6caca72431739fa5cde6be9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in images.pages.dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 298bd92325308b96679afb4dab0afe1faeded22ac6714ac9b1a9bf0df3e6119a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in microsoft-authentication-libraries-for-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f75669d6664923be2d575d6ea6dd476150b546b8a89bf1af9ee6fd470045b85f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paypal-server-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2031c18b112a375fcbcf727d2a0ca070c13daadc4477fa5a6e61a5e60957f676 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in developer-hub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7028f9c0bc3315f11a48ce063889decd60554ce5b93de9380c43cb83f4d1971 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in twenty7tec_client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e017d2769480cbf3bba9db2ccbdb6c84d6ab1f2717361c18fb96f2dcf442619c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cs-magnifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d412de7658e93719fd412b6f30d39270ed6190482deb65c00aaf002f96fe7e2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in csachalk-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 484ccc916593adfc8a6d648bed55aeb2fd3ee9ced5c1ca74ccc2aba7a903cf6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...