Malicious code in resolver-options (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68b3b87faef2aa88da0714f9641eef9b258d050775eb10ec9fac90abbae5d8b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in toc-generator-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78aba0f665dc55e94b5a5dc3b90ce2d371080c1acda0c4565429afcfb9ba4fe6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in smart-file-renamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28b650ad09355a36c0fcdb91255b1bcb59984a12295de8a0a88ac5735c29f7f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @takamol/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67b5584d88d529b51cf18b19dbc2c0944ee8b54e09fbe249eceb421fba596344 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in osxlocation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 070d31af50179f9a0b4cbd8dc75d3bb1e6b873b3b0dee8490eb4d252e5179f45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfd62ceee47f0cd86d2f4187fac0af99eb626f31eecad5929dcd0d7797ec95ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cdn-icon-fetcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f6e6ce42315c38bb4b79009fe96871dc66ebb2264708567c3fc78d6b96e9c73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mindbody-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40e37ef0ad0fe9988ddbdaac4f3d9be1ad02f040ef04bd54fd5ffeb9ff266d33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wzdui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cacd050cea2b1850685666f4a7e40c1d2564107415007d0235ea5e0bad8ff1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sfapm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 853b53676c5023f880be7c158c82254598429dca281399a1d04fb433be3e7908 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sensort/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea8b1441ce3b2e9b979e7562567a2633263870f02bd46c47cb35aa404908f26a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xablaublaubleu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 517f9db9c7e3148af0c2eb9436c27e04be309af39f1cec5b099c2d51fc4d119d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in font-basic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 367ed90a0717540aa229a6544a1cb3675b5f89a5d7b3f6fec3bd4720858c569b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-script-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c5fced45c5f4fd8509ee982e4bafe3f8e0a7c17c4a7470b28b33e38ec23824e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blockzie-vm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb3a57f31a55bf6b61e947fd54bb26e5de20bc664ed157e3551c9c8342bd7a72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in architecture-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4282b66b0052ca80f8717181dbf7b0b94e88433b9e37f9ae718531960f9ddcbd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Deserialization of Untrusted Data in Apache Tomcat

CVE-2025-24813: Apache 1. Explanation Tomcat is vulnerabl...

CVE-2025-29923 go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment

go-redis is the official Redis client library for the Go programming language. Prior to 9.5.5, 9.6.3, and 9.7.3, go-redis potentially responds out of order when CLIENT SETINFO times out during connection establishment. This can happen when the client is configured to transmit its identity, there...

Malicious code in azqr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb71a6e47211aafef20b598bad3d2ca81ae69098aa95f8a3a61f8edcccf6cef9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in momo-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81d74db94da3274b3d9b70e5de7f5b926c9c1af17a6d2a6b733d63a4cbacdf41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...