Malicious code in lead-marketing-metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 016aee50e66161e661a3081d1f57bce99eac8911deffc17f059b8b1bec74a13e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in packeage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b50411a0f653d34ae98d6d973a1c004d7fa8f67f71b7b6f07b34ed5288af404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cscchalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66587f2f6462d9fe615b5a03d13cfd464722cf0427aeb9392e4006f6d442d66a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cs-icons-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bf6991c8217c461988208239682ccf9c3ea1b42f51a0d382a8360308e951a43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in launchpad-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e634713ebf6a8dfa6716324301d5ae77fb7e1081cc18e12d85dc9a2cce5d85a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pulumi-automation-sdk-ssh-tunnel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffa176b4dcf4483a947e659d4d4855bd174744d67a8ed98dadb4ddd425e41ea6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in turbolinks_jwt_test2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b92cfb1f0aae95221f984fee31e7ab9fb4e77b58ef2c53bf6aa33e245bae746d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in requests-async (npm)

The package contains several malicious PowerShell and VBS scripts used to harvest browser data, take screenshots, log keystrokes, and establish startup persistence. It also bundles a password stealer and exfiltrates stolen data via Slack and Discord webhooks. --- -= Per source details. Do not edi...

MAL-2025-618 Malicious code in requests-async (npm)

The package contains several malicious PowerShell and VBS scripts used to harvest browser data, take screenshots, log keystrokes, and establish startup persistence. It also bundles a password stealer and exfiltrates stolen data via Slack and Discord webhooks. --- -= Per source details. Do not edi...

Security update for go1.24

This update for go1.24 fixes the following issues: This update ships go1.24rc2 bsc1236217. CVE-2024-45341: Properly check for IPv6 hosts in URIs bsc1236045 CVE-2024-45336: Persist header stripping across repeated redirects bsc1236046 CVE-2025-22865: Avoid panic when parsing partial PKCS1 private...

Security update for go1.23

This update for go1.23 fixes the following issues: Update to go1.23.5 bsc1229122 CVE-2024-45341: Properly check for IPv6 hosts in URIs bsc1236045 CVE-2024-45336: Persist header stripping across repeated redirects bsc1236046 Patch Instructions: To install this SUSE update use the SUSE recommended...

Ransomware Targets ESXi Systems via Stealthy SSH Tunnels for C2 Operations

Cybersecurity researchers have found that ransomware attacks targeting ESXi systems are also leveraging the access to repurpose the appliances as a conduit to tunnel traffic to command-and-control C2 infrastructure and stay under the radar. "ESXi appliances, which are unmonitored, are increasingl...

Malicious code in compound-protocol-alpha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03d150fbb080030ea3445a65033db1386bff9efd41db369c041100a4eedbcea6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in compound-protocol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af5d6716f9bf59535bb198a6a0def45229c19613577dde244bb2a4562790b3db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ig-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 379d23f2972b694bbd86df7bfb1e700877bcb3762383582507d752113bbb3eb9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airbnb-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f07949285a0d1add8d97f855b50c15882889463a482eb03f4ea66453dfcb601f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bookingcom-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 797af29edb828b7011355ada91e0e1fab75d5725bf2213d65f47f4c1f407987a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bookingcom-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f32c3da478ba3712d3de331495d003e14f2fd28a94f708a94c9ed9881f50dc06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ebay-tester (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90f4e5751e5f6c07e15364668fd8d7068811404a8ba15818099e884f880adbed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-server-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99319a0fd3901abbb085faaaf7efaf653934eae74c3d6d4e442005aa875e822d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...