Malicious code in readium-shared-js (npm)

Malicious preinstall script exfiltrates system info hostname, user, pwd, id to a remote server. Likely a malware. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c907ca12944ad675a60dbfd27a1680a1b2ebf1186512d0106676795741a558a Any computer that has this package...

Malicious code in eslint-plugin-panel-ops (npm)

Malware: Executes code on install, exfiltrates data via DNS to a suspicious domain. Contains a preinstall script and phone-home behavior. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc1ea7508e63005e73356cfdb457f0050ebb7ae1f04cb319592c30a140c4e2f2 Any computer th...

Malicious code in pie-docs (npm)

This package steals IP address and sent it to C&C server in preinstall hook. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6326ffe9d39e0d889a1a93b2faf51b274055e4a9f12f3596cdca2f85098245d3 Any computer that has this package installed or running should be considered...

SUSE SLED15: build / build-initvm-aarch64 / build-initvm-powerpc64le / etc (SUSE-SU-2025:0857-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0857-1 advisory. - CVE-2024-22038: Fixed DoS attacks, information leaks with crafted Git repositories bnc1230469 Other...

SUSE-SU-2025:0857-1 Security update for build

This update for build fixes the following issues: - CVE-2024-22038: Fixed DoS attacks, information leaks with crafted Git repositories bnc1230469 Other fixes: - Fixed behaviour when using '--shell' aka 'osc shell' option in a VM build. Startup is faster and permissions stay intact now. - fixes fo...

Malicious code in zztest890 (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f0bfcc0f336c7ee2a414f1d146dc59634be795c3a17855e4f9f62d26c58958e Any computer that has this package install...

Malicious code in zztest82 (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 632d9a2711114ce930c19d98e24aab1daa8d6d2a81f71ef0025260b16442acec Any computer that has this package install...

Malicious code in yxt-factor (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=-...

Malicious code in testing098765 (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain...

Malicious code in dracoon (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain...

Malicious code in archon4 (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ec2543510c509cdbd699b1c37ba00b56f4d5004085b9e485f6541b23a6e18c2 Any computer that has this package install...

Malicious code in my-archon (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c7bbe8cfdc04ced4b0dff759d1be7c1edfc86383d562400758b12247002608f Any computer that has this package install...

Malicious code in archon6 (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9926eff92492428efb3018691093b936b8924920a886240875a09cec72235ead Any computer that has this package install...

Malicious code in app_custom_pinterest (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6eda30e8662c93eff9aaf1eab0b5e8b94ded5b54ef5e06511df7f16fe714aa9 Any computer that has this package install...

Malicious code in bm_pinterest (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db53ad3a5da691f044a5de461b6045524d00aa3877c21a780694c922ede4c76a Any computer that has this package install...

Malicious code in clubhouse-to-linear-exporter (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 763c04a1400336e5c62621aba4027b81dfb2b2ba0b01ec823e0f4f62703e0eed Any computer that has this package install...

Malicious code in biconomy (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d36016f4e5e71e33918b3f098d8c1e7f6339a01117dd3a2c63c7a4ae6ee6a6ae Any computer that has this package install...

Malicious code in biconomy-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc0a0f2ab0beead5e42fd0146fb90778a0a15b54ffa2b9b65db7fb0612c31d5d Any computer that has this package install...

Malicious code in deepcoin-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f03ef4f8a77536dbc09bc7dc855b7b176153e3f037ea6eedf02d2ec74f9cbed9 Any computer that has this package install...

Malicious code in bitflyer-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 383c2afaf3673c3bf9d9c169466342bc62fc54e5780e3248c1a28b85c161b744 Any computer that has this package install...