rgui-3.4.4-seh-bof-exploit

💥 Exploração de Buffer Overflow SEH Overwrite no RGui 3.4.4...

fox (>=1.5.0 <=1.6.2), pomodoro-timer (>=0.0.4 <=0.0.5) +3 more potentially affected by unknown CVE via after-time (>=0.0.0 <=0.0.1)

after-time NPM version =0.0.0, =1.5.0, =0.0.4, =0.0.0, =0.0.0, =0.0.1 - tomato-timer =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-14147...

attr (>=0.0.0 <=0.0.1), door (>=0.0.5 <=0.0.6) +6 more potentially affected by unknown CVE via new-pubsub (>=0.0.3 <=2.0.0)

new-pubsub NPM version =0.0.3, =0.0.0, =0.0.5, =0.0.7, =0.0.0, =0.0.0, =0.0.0, =0.0.2 - watch-array =0.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27366...

brick (=0.0.0), fox (>=0.0.9 <=1.6.2) +2 more potentially affected by unknown CVE via core-modules (=0.0.0)

core-modules NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on core-modules and may be impacted: - brick =0.0.0 - fox =0.0.9, =3.0.0, =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17577...

brick (=0.0.0), duo-parse (=0.4.0) +4 more potentially affected by unknown CVE via memoize-sync (>=0.0.2 <=2.0.0)

memoize-sync NPM version =0.0.2, =0.0.9, =5.0.0, =3.0.0, =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26179...

brick-node (>=0.0.0 <=0.0.17), change-object (=0.0.0) +9 more potentially affected by unknown CVE via pause-function (=0.0.1)

pause-function NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pause-function and may be impacted: - brick-node =0.0.0, =1.16.0, =0.0.0, =1.0.1 - stream-format =0.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-28923...

fox (>=1.1.0 <=1.6.2), prova (>=0.0.0 <=0.0.2) potentially affected by unknown CVE via simple.io (=2.0.0)

simple.io NPM version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on simple.io and may be impacted: - fox =1.1.0, =0.0.0, =0.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33280...

change-object (=0.0.0), cli-qa (=2.0.0) +7 more potentially affected by unknown CVE via run-serially (=0.0.0)

run-serially NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on run-serially and may be impacted: - change-object =0.0.0 - cli-qa =2.0.0 - comma-list =0.0.0 - fd-select =1.0.0 - frp-tick =1.0.0 - innkeeper =1.0.4 - limited-parallel-loop...

Malicious code in prova-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 938fc5bb5c8e1be3541bd49183cc6bed9f7683b7d3d547f7273b89117e79d193 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...