aggressor (=0.0.1a0), cartesia-mlx (=0.0.2) +13 more potentially affected by CVE-2025-62609 via mlx (>=0.0.4 <=0.29.2)

mlx PYPI version =0.0.4, =0.0.1, =0.6.0, =0.1.9, =0.4.2, =1.2.0, =0.0.0, =0.0.27, =0.0.1, =0.0.3a0 Source cves: CVE-2025-62609 Source advisory: OSV:GHSA-J842-XGM4-WF88...

MAL-2025-3520 Malicious code in @reserach_org_jfhalsdhfkslsfds/openai-server-skfghdg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 531ef457dbcd25a906548abdc4d37822a3b2e6ceebbc9faa5eb06f2352bb1525 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...