Malicious code in @baywa-re-lusy/nsemea-quote-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a970ecd3fffeb12875946cc0b4a9b9cbf2dd78228eda981cb2ad8316f22a2404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3532 Malicious code in nsemea-core-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dad870b6719a7ca56397739f03731e2e597c7008601ef058d93c6b312f6b4725 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3540 Malicious code in webview-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 350de9d57836c502b1910805b2b6d9a4e1f5aad34e121671d5482c073889894a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in metadata-collector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d0c00e28320e5a836d89bb26152ff2b5c4989287285bb5071872ad3413821cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: Potential Oracle Outside In Technology Vulnerabilities Exposed in ECM Products (CVE-2011-2264, CVE-2011-0794, and CVE-2011-0808)

Question Oracle Outside In Technology contains exploitable vulnerabilities in the CorelDRAW CVE-2011-2264 file parser, the File ID SDK CVE-2011-0794, and file filters CVE-2011-0808. Each of these vulnerabilities may allow a remote, unauthenticated user to execute arbitrary code on a vulnerable...

Malicious code in graphhopper-js-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 528454d3ceaec479832ef3607c05e7f1a1f58026c1a94fcfb2b3835b952d9c2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b5cad81db450339a0757b061ec3451b681549d64b58b8ef18bb17baf584084d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3391 Malicious code in dowload_ebok_krebszellen_mogen_keine_himbeeren_aktualisierte_by_prof_dr_med_richard_beliveau_dr_med_denis_g_505sj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49f5b903af0837bff399f0cd318f2e34983b7fdb935b44b8e599047ce1b417b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GNU Mailman 路径遍历漏洞

GNU Mailman is a free suite of software for managing email discussions and email lists from the GNU community in the United States. GNU Mailman suffers from a directory traversal vulnerability that originates from a directory traversal that results in arbitrary file reads. An attacker could use t...

CVE-2025-0467

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory...

MAL-2025-3257 Malicious code in helper-split-export-declaration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6daaf23e3df1ed0abe704ec032c37ed6c1d9ba40629a7588eabbb6adf785ad36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eco-solver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a8f7c5551c322952642a4ae7cfaa02b59bd51fd08667100bbcf22cda084b0e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ezidox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77793c97cf9e01c68e50b8c80e44f0591a67a78cbcd13b931f43cb56dc7fe0b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flex-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49eefd4354e4d8c5354eddd891739db212953f6cf5c4aa193bf5470a8e77c820 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in data-memocombinators (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 392ef8199fed690581519bcc38f5cb1dcc29af2196b24b72a3c21df826f531cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in esy-m4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d50f3c1994b8efe53e778d8ba331e1ceec48993b57b0fc3f279eb3f4b9dea361 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-15453 · Cursor · Cursor

Name of the Vulnerable Software and Affected Versions: Cursor versions 0.45.0 through 0.48.6 Description: The issue affects the set of file paths the Cursor Agent is permitted to modify automatically. Under specific conditions, the agent could be prompted to automatically write to files outside o...

Cursor 路径遍历漏洞

Cursor is an AI code editor from the Cursor open source. A path traversal vulnerability exists in Cursor versions 0.45.0 through 0.48.6, which stems from not properly restricting file path modification permissions, which could lead to a specially crafted context-triggered write to a file outside...

Malicious code in start-state-machine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 817dc6cbfa89267c683591874924c9aaf14005ca7e5da82c2d7ee55fccb52c76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nva-process-inf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d654f39c1766e74a8a2950ae8ceb43686999ec02923d6454655c6596bd87354b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...