Malicious code in cdn-icon-fetcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f6e6ce42315c38bb4b79009fe96871dc66ebb2264708567c3fc78d6b96e9c73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mindbody-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40e37ef0ad0fe9988ddbdaac4f3d9be1ad02f040ef04bd54fd5ffeb9ff266d33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sfapm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 853b53676c5023f880be7c158c82254598429dca281399a1d04fb433be3e7908 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wzdui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cacd050cea2b1850685666f4a7e40c1d2564107415007d0235ea5e0bad8ff1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sensort/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea8b1441ce3b2e9b979e7562567a2633263870f02bd46c47cb35aa404908f26a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xablaublaubleu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 517f9db9c7e3148af0c2eb9436c27e04be309af39f1cec5b099c2d51fc4d119d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in font-basic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 367ed90a0717540aa229a6544a1cb3675b5f89a5d7b3f6fec3bd4720858c569b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-script-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c5fced45c5f4fd8509ee982e4bafe3f8e0a7c17c4a7470b28b33e38ec23824e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blockzie-vm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb3a57f31a55bf6b61e947fd54bb26e5de20bc664ed157e3551c9c8342bd7a72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in architecture-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4282b66b0052ca80f8717181dbf7b0b94e88433b9e37f9ae718531960f9ddcbd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Deserialization of Untrusted Data in Apache Tomcat

CVE-2025-24813: Apache 1. Explanation Tomcat is vulnerabl...

CVE-2025-29923 go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment

go-redis is the official Redis client library for the Go programming language. Prior to 9.5.5, 9.6.3, and 9.7.3, go-redis potentially responds out of order when CLIENT SETINFO times out during connection establishment. This can happen when the client is configured to transmit its identity, there...

Malicious code in azqr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb71a6e47211aafef20b598bad3d2ca81ae69098aa95f8a3a61f8edcccf6cef9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in momo-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81d74db94da3274b3d9b70e5de7f5b926c9c1af17a6d2a6b733d63a4cbacdf41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tasks_viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21e1bcb65dac0ffae9b7b7e0f14570fa73511f72e91dc2ff7c600497e4d4f9a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tokesjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77cf2bffbafed158e996b9fb6581994a5dda5f00137197ee10e3538b2e68eeb9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ex-edge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65081bd793c4f4c12132faabd6d0a64758adb672b65b0b21062dbf804396f80c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zhdex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26fbd05a0708bfd20a0abd31a447aec6da2d03a0775abd736c4ab2e1f09788ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in you-test-test-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13a9b3aed0c3abe33ee85f5fc9b7c0dd8020835cb6f1c038f1f6dd6822561a3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in career-craft (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5d3af1a920beb4a5ab94433e38b127dc8105f4ca7e527ad53b5a80b0e992111 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...