CVE-2025-52493

PagerDuty Runbook through 2025-06-12 exposes stored secrets directly in the webpage DOM at the configuration page. Although these secrets appear masked as password fields, the actual secret values are present in the page source and can be revealed by simply modifying the input field type from...

CVE-2025-20373 Sensitive Information Disclosure in “_internal“ index through Splunk Add-On for Palo Alto Networks

In Splunk Add-on for Palo Alto Networks versions below 2.0.2, the add-on exposes client secrets in plain text in the internal index during the addition of new “Data Security Accounts“. The vulnerability would require either local access to the log files or administrative access to internal indexe...

MAL-2025-190657 Malicious code in @asyncapi/generator-helpers (npm)

@asyncapi/generator-helpers version 1.1.1 was published as part of the "Miasma RAT" software supply-chain attack campaign identifier "miasma-train-p1" that compromised several widely used @asyncapi npm packages on 2026-07-14. The malicious code was injected using whitespace hiding: it is appended...

Dismantling a Critical Supply Chain Risk in VSCode Extension Marketplaces

Wiz Research has uncovered 550+ secrets hiding in plain sight. We worked with Microsoft to shut the door...

CVE-2025-59434 Critical Multi-Tenant Variable Disclosure in Flowise Cloud via Custom JavaScript Function

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to August 2025 Cloud-Hosted Flowise, an authenticated vulnerability in Flowise Cloud allows any user on the free tier to access sensitive environment variables from other tenants via the Custom JavaScri...

MAL-2025-47373 Malicious code in @art-ws/config-ts (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e845947405bf6a59280848d6a325827b53bdca23c8a3b28e4db032075842cccb Any computer that has this package installed or running should be considered fully compromised. All...

CVE-2025-41240 Mounted Kubernetes Secrets under a predictable path located within the web server document root

Three Bitnami Helm charts mount Kubernetes Secrets under a predictable path /opt/bitnami//secrets that is located within the web server document root. In affected versions, this can lead to unauthenticated access to sensitive credentials via HTTP/S. A remote attacker could retrieve these secrets ...

Malicious code in vite-jsconfig-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa2206f03805567e12ada7cbae343d47492532958d8f685e73562fee9972b3b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mxc-klinecharts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c79272f6f70f9c9bb5fd7c93c139322148f3fe12787d784e9e7e8530dc002134 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2025-0495

Buildx is a Docker CLI plugin that extends build capabilities using BuildKit. Cache backends support credentials by setting secrets directly as attribute values in cache-to/cache-from configuration. When supplied as user input, these secure values may be inadvertently captured in OpenTelemetry...

CVE-2020-26226

In the npm package semantic-release before version 17.2.3, secrets that would normally be masked by semantic-release can be accidentally disclosed if they contain characters that become encoded when included in a URL. Secrets that do not contain characters that become encoded when included in a U...

MAL-2024-11104 Malicious code in ssc-ui-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10775484e313af2e57ee7c28ebce842529ccf7c54b60d5deec9443f2d77324f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8860 Malicious code in color-print12345 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73a80777a026505265f48975425e0d198263c4cce7bae5200201d7a10c7b329d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8602 Malicious code in @diotoborg/rem-minima (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ac8c3c0c15b0999b73c7815d6ba515d2d37f450180559445f1aaa418dfcb404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8133 Malicious code in @diotoborg/aperiam-cum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb4500021bc56d1007188a6c5a34135cef19214d511bdba545eac3a7fcae98ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8587 Malicious code in @diotoborg/ratione-animi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99fbce442b156c6ca8741c6adc28f303a48f96a03c4ed901e5665e96c520f9d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7366 Malicious code in @zitterorg/rem-optio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12251ace5b8c1069cc484f512bbd1e31fe2cc3cfb90fa2bfd47b5d2687d2274b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7093 Malicious code in auth0-authz-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ddc031877d6efc19470df3d757e067cb9fd38974fd69be4140e854f2ca69840 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-933 Malicious code in iifl_express_middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bd6065d5aeb8d845fa2198e1ffedbb927895fbac183920ec87d85e89c79c03b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-843 Malicious code in wlwz-2312-7407 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5598f2500474143c1b6765ca2f10626af481f2562493214cc9504a92b497a5f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...