Malicious code in contaxy-webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e369d55f0561aa0c1af981aea283045a266800715c8ecfdcd178cece2cc853b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in snap-design-system-marketing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41a0edf987afa7aec8736b2683c5bb597fe53fcddad3dddbc3ea1074e252e8b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Deserialization of Untrusted Data in Apache Tomcat

利用条件 + DefaultServlet 写入功能启用：需在 web.xml 中配置 readonly=false...

One PUT Request to Own Tomcat: CVE-2025-24813 RCE is in the Wild

A devastating new remote code execution RCE vulnerability, CVE-2025-24813, is now actively exploited in the wild. Attackers need just one PUT API request to take over vulnerable Apache Tomcat servers. The exploit, originally published by a Chinese forum user iSee857, is already available online:...

Malicious code in vue-plugin-rely2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40758ca258b918a5774943b38676e85d236795a65d98fe659605aa7b2f72db83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dingpengtest-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 325da1087c6b9a78d54fd2d9d92270a587831c91eda6e1620e828bd0a9eea080 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tfjs-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f988d82286807268077d9806410b6edfd3fa135a38f79f948a3e293d9e9ebf40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tsl-card-body (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3b827feadef7c2656600460243604631e02bc0a0b8ade3e8f317a7a5964ffd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in data-ui-v (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31699b2697ce8618e833f2917ee401c8d6a8a1300cc5d48905de3fd7895c9577 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in epic-debug (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d79b6f53b73a42bf490549818051758b4fafca55d32e9d85060712adfa1b5e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in remix-run-route (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5399b923491b48948c89e6e1e30d9d3028f6bb8db3bdc9f8d48b513a879ac1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in workfront-twind (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7c06148979b56d31fa18740b0a7a755e2fd9227646b7b09a6f9225ffda0c0ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in small-ct (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfe959f74a18f4f037110a64d63e3df75b81cd2fd86ff0dac1c46ba7f2ec1b54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scriptconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bd3ce93e4d932714fc3eccce5d02ae6e79657a46f27202ecbe3278d0414555e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sheingroup/justakiss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcd17fcad0f2896dfc1a21c4b0e65d0db6a1deae574d2ee5f8a51b31309b3290 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in superdope (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9abd6ad5a2ad3503841de7c5ecf7e733d3b98b26b025f093b39f0424bc78fab4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-event-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7117f482ca3c7fec4102581d249b98a017fe0b05eb1dbc836070e0f0c8b245c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in code-snippet-editor-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a18fa3d11188e4b7891ebae39b972feeef16bdfe9a92659b7efc450374065e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in image-watermarks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 696779031d179d99d69d2fd89de3ae89e25e8bc093c528000aeb73c0bf7525f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in www-discoveryeducation-com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b81d0d31dd0c1ad59b382392dd3309ca9d6ca9ccafde5ab54ee3c7a4c38fb20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...