6556 matches found
Malicious code in nextjs-edge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e760ae97f3946b05b183b7e2d558f757bb3bf66afe4199dc5e2d3b54aa0b5e3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48033 Malicious code in nextjs-edge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e760ae97f3946b05b183b7e2d558f757bb3bf66afe4199dc5e2d3b54aa0b5e3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48026 Malicious code in concurrent-ruby (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a9a44087853b6fa03aa9a4f09e51ff827a6d90b6fe4da7c38cc6ef2764ad99d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-34252
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. This vulnerability has been reassigned as CVE-2017-20203 https://vulners.com/cve/CVE-2017-20203 to have the year of the CVE correspond to the year of public disclosure...
EUVD-2025-32881
NetSarang Xmanager Enterprise 5.0 Build 1232, Xmanager 5.0 Build 1045, Xshell 5.0 Build 1322, Xftp 5.0 Build 1218, and Xlpd 5.0 Build 1220 contain a malicious nssock2.dll that implements a multi-stage, DNS-based backdoor. The dormant library contacts a C2 DNS server via a specially crafted TXT...
CVE-2025-61687
Flowise is a drag & drop user interface to build a customized large language model flow. A file upload vulnerability in version 3.0.7 of FlowiseAI allows authenticated users to upload arbitrary files without proper validation. This enables attackers to persistently store malicious Node.js web...
XWorm 6.0 Returns with 35+ Plugins and Enhanced Data Theft Capabilities
Cybersecurity researchers have charted the evolution of XWorm malware, turning it into a versatile tool for supporting a wide range of malicious actions on compromised hosts. "XWorm's modular design is built around a core client and an array of specialized components known as plugins," Trellix...
Microsoft Links Storm-1175 to GoAnywhere Exploit Deploying Medusa Ransomware
Microsoft on Monday attributed a threat actor it tracks as Storm-1175 to the exploitation of a critical security flaw in Fortra GoAnywhere software to facilitate the deployment of Medusa ransomware. The vulnerability is CVE-2025-10035 CVSS score: 10.0, a critical deserialization bug that could...
Malicious code in res-notification (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef24fa6bd07739f45e7e31a196535dc42562533848a3b3dcd6b7bc98b16ff4dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48001 Malicious code in pb-digital (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 399c96f79b4c7c55dd2c9b4ac41c7fa11d3d1cbf26fcc0e1dbb1b222937711eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @raydium-utils-v5/fetch-wallet-balance (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6767cf6fa4bd28e8f2921afd36fd888dc17d2fa9fa759e4d279464c8cc45a387 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47978 Malicious code in jito-proper-excutor (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5397e87731c5d42672f0ac041fb0935695b96a2b12b83eae8c7407c247eb0f52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47971 Malicious code in acme-auth-utils-2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 381bf10b2439022678c5ee610a1ef1f66a302de861937b7237aaafb4e83d7aba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @dompubsub/dompubsub (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70f03208a21f43efdf0471c0a1908c3a7229b8ebdd3572b58fe5921496b85902 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in raechaartas (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9356d7106780c664ef4cc428fb0f72fc1165f196d819bb3a20fc0a86d648a0b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in orvlllcj (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ab4b3c617ed2588b83e702343b7afb883c2f26a6b15cfd1a269e7b928a22ea6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47953 Malicious code in oxrvxalllcaj (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c188f8718a360fffb7f5a032f1b21e428c2fc9542ab537b0acd0c602b28d3a0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47941 Malicious code in solarpeng126 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 555f2017520c849b1c7dce6f6f434c29609c169105711e6ab0b598d5f329644a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...