Malicious code in gss.survey.application (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 213760c83aa3e5576abe366dc9948b4e76fae43fde4241bb04aed016bdc1313c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in autogestion-aprendizaje (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a10891d5659b15f733c35690ff9315e18a84d6eb133bbe3f99e6ecd9408bec37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in referrals-landing-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af44c1859de435203a802f9ebc54d261a9baa1c82b581c6735726c322cff737e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

New XCSSET malware adds new obfuscation, persistence techniques to infect Xcode projects

Microsoft Threat Intelligence has uncovered a new variant of XCSSET, a sophisticated modular macOS malware that infects Xcode projects, in the wild during routine threat hunting. Its first known variant since 2022, this latest XCSSET malware features enhanced obfuscation methods, updated...

GHSA-83QJ-6FR2-VHQG Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

Path Equivalence: 'file.Name' Internal Dot leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.2, from 10.1.0-M1 through...

UBUNTU-CVE-2025-24813

Path Equivalence: 'file.Name' Internal Dot leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.2, from 10.1.0-M1 through...

CVE-2025-24813

Path Equivalence: ‘file.Name’ Internal Dot leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.2, from 10.1.0-M1 through...

Malicious code in realityspiral (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 750c382ff53ef751feeedfaf955cf5b12ff8fd6f91a1087c0616eddbab203913 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wrap.scrt.network (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb46cf4f945ffd141ee169ecf371a571f2692a3287c77efe8a9ea92c4811acb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aem-headless-advanced-tutorial-wknd-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fb0b752510b8d479c92185f2871183cd1bbd1ef4d7507d43ccd130c3fd24e1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @adminproxy/module-utils-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbdecb9253986cff5b752fb6e685010877c7e57ebcc7c19461ac03578f80b3c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @fcss/ui-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7badd1358c73b5aebf13b4734aa71ebd55fd281b1a1a05a7f60e7890e6254741 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sol-web3-bundler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e73dbdaf8639ea1c473efeb0189d43de845d8508ed24ce8a3875f0acd549d1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in upbit-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7391f484ff16261f5d67a14345fd40f488d3bd82c97ee08473b69af879adc46f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hh-sol-artifact-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e98f2e66755e1bb1030d04fdd4f0bcd8693e045ede73b18d61ff0b84f6c0daa5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in organizer-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71911a8ea9e577cc58952aaad429e86a8c29e91145fc92156b41365c77f19012 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aws-features-signin-proxy-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ce6c3acab744d13386f25fd9a0ea075cb42fcaf98c20bc4a279a88838fad81a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @f2p-mml-frontends/mml-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ede0cf36fe3863ea31a447c95853a9a95a8b926d51476470fdcbc2bedfeb2b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rdocs-light (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d1b6fac6abdefe443e0bc5cf7425f5b8dd8b32080d8e429eb9c2031ca18b059 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in actsearchserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6c4eab78bddce77aac2f34051b50053de02bb1863af9c473abace0eb438b06e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...