EUVD-2025-36803

Malicious code in @aio-commerce-sdk/config-tsdown npm...

EUVD-2025-36802

Malicious code in @aio-commerce-sdk/config-typedoc npm...

Malicious code in @aio-commerce-sdk/config-tsdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0ae61acddeafb85596fd6c4a2c12309826d57b53250d789af0b1145bc8a2c3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48956 Malicious code in @aio-commerce-sdk/config-typedoc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7115c3c8e9d8049f239251eeaf99504698b6eea04f36d5490dedff17b173f77b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-36800

Malicious code in @aio-commerce-sdk/config-vitest npm...

MAL-2025-48958 Malicious code in @aio-commerce-sdk/config-vitest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 952a468e9821b0b8238bc9a6e6c0f9ee4964fca63e82403ed880279141fb5088 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview firefly-sdk-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-36837

Malicious code in firefly-sdk-js npm...

MAL-2025-49004 Malicious code in firefly-sdk-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa500d2c9575be38d669c176c963359a471ba4af4853d21ba5031d9f8ed93b33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-36710

Razer Synapse 3 Chroma Connect Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in...

CVE-2025-9871 Razer Synapse 3 Chroma Connect Link Following Local Privilege Escalation Vulnerability

Razer Synapse 3 Chroma Connect Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in...

CVE-2025-9871

Razer Synapse 3 Chroma Connect Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in...

Razer Synapse 3 后置链接漏洞

Razer Synapse 3 is a software application from Razer, Inc. cloud-based unified hardware configuration tool. Razer Synapse 3 suffers from a backlink vulnerability that stems from a symbolic linking issue in the Razer Chroma SDK installer, which could lead to elevation of privilege and arbitrary co...

EUVD-2025-36397

Malicious code in fzreo-trading-sdk npm...

Malicious code in four-sdk-aes-ipheriv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d8d19d191eddc67d0a2a9f1987b679d130fc16751d12748f1412508aa114dd The package four-sdk-aes-ipheriv was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview four-sdk-aes-ipheriv is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in fzreo-trading-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f88d8fd4cc0828b828f3a6fe64daf9b8dc84c84729972d2c17de5559ab96c653 The package fzreo-trading-sdk was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-36398

Malicious code in four-sdk-aes-ipheriv npm...

Malicious Package

Overview fzreo-trading-sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-48928 Malicious code in fzreo-trading-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f88d8fd4cc0828b828f3a6fe64daf9b8dc84c84729972d2c17de5559ab96c653 The package fzreo-trading-sdk was found to contain malicious code. Source: ghsa-malware...