MAL-2025-48931 Malicious code in internallib_v799 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee173949777ba0b061bf769290f356eb15c53e47c71278188116dbf5277c404 The package internallibv799 was found to contain malicious code. Source: ghsa-malware 90a16371dd0bdd2b43694453483bd59007c45f09296a782bb436d256daa8264...

Malicious code in internallib_v799 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee173949777ba0b061bf769290f356eb15c53e47c71278188116dbf5277c404 The package internallibv799 was found to contain malicious code. Source: ghsa-malware 90a16371dd0bdd2b43694453483bd59007c45f09296a782bb436d256daa8264...

Malicious code in testing-react-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbdad1c6b2cbaa881c03a533fde5a85986c6874bac954dac58ba160364704947 The package testing-react-dom was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48938 Malicious code in testing-react-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbdad1c6b2cbaa881c03a533fde5a85986c6874bac954dac58ba160364704947 The package testing-react-dom was found to contain malicious code. Source: ghsa-malware...

Malicious code in ews-paze-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 919f20823a98370aeff343ebdedbd1f86353649a1f852ec6c5ef7314925970d4 The package ews-paze-toolkit was found to contain malicious code. Source: ghsa-malware 60989a72103601dc11b185549de7abb4bdb1442776d790dab1945d25b5ab27...

MAL-2025-48924 Malicious code in energy-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4830ca4abd86f26380368ac28f819b1c5a209bb67804a59ac916cab4f96099f6 The package energy-portal was found to contain malicious code. Source: ghsa-malware de4d4f73709d8cd24cf252de30a2c865264a7a804813494674c2a6cb15337c8e...

MAL-2025-48935 Malicious code in shopify-ruby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 974d73b54aa22ffaf8dfee7094b175bea558642ea43dda60cee5bc58b44ed17f The package shopify-ruby was found to contain malicious code. Source: ghsa-malware a529d693e0fe4a67a348d26b2117b4b314994f3378fa0ed92576c915cd5dccff A...

Malicious code in energy-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4830ca4abd86f26380368ac28f819b1c5a209bb67804a59ac916cab4f96099f6 The package energy-portal was found to contain malicious code. Source: ghsa-malware de4d4f73709d8cd24cf252de30a2c865264a7a804813494674c2a6cb15337c8e...

Malicious code in shopify-ruby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 974d73b54aa22ffaf8dfee7094b175bea558642ea43dda60cee5bc58b44ed17f The package shopify-ruby was found to contain malicious code. Source: ghsa-malware a529d693e0fe4a67a348d26b2117b4b314994f3378fa0ed92576c915cd5dccff A...

MAL-2025-48934 Malicious code in shopify-logistics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c496eebb9741a5d54e47561695a16482339e4d8b2094e4269c722c2cd17b04b The package shopify-logistics was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48925 Malicious code in ews-paze-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 919f20823a98370aeff343ebdedbd1f86353649a1f852ec6c5ef7314925970d4 The package ews-paze-toolkit was found to contain malicious code. Source: ghsa-malware 60989a72103601dc11b185549de7abb4bdb1442776d790dab1945d25b5ab27...

Malicious code in types-lodash.es (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ad198ed6efdd1d7367a198d4b5c761b7ecf5421158cf8cce424a4f693598f1f The package types-lodash.es was found to contain malicious code. Source: ghsa-malware cd47d05a7a2bdd9fbd2f267aaeb6664d79583714a396f493858e926e1cc25f0...

MAL-2025-48939 Malicious code in types-lodash.es (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ad198ed6efdd1d7367a198d4b5c761b7ecf5421158cf8cce424a4f693598f1f The package types-lodash.es was found to contain malicious code. Source: ghsa-malware cd47d05a7a2bdd9fbd2f267aaeb6664d79583714a396f493858e926e1cc25f0...

Malicious code in vite-manual-chunker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2466db729b423d58b084a5f99834cfaf8c62af4179350ef30978e32f36b50fa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48914 Malicious code in vite-manual-chunker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2466db729b423d58b084a5f99834cfaf8c62af4179350ef30978e32f36b50fa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48915 Malicious code in vite-plugin-es6-compat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3963df81ab545839d03c3c54ab9ee88549e38a44b32fe6ad05002d554da780b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-es6-compat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3963df81ab545839d03c3c54ab9ee88549e38a44b32fe6ad05002d554da780b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in agentmono (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b99f3b1dcad52f8f2c59db3ae476dc1f7a0befd8ece95494c36b13e5023029f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-61482

Improper handling of OTP/TOTP/HOTP values in NetKnights GmbH privacyIDEA Authenticator v.4.3.0 on Android allows local attackers with root access to bypass two factor authentication. By hooking into app crypto routines and intercepting decryption paths, attacker can recover plaintext secrets,...

Malicious code in sreadmin-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b2b51756599b7bbc43536b940ffec7c6c41643e17ababeb1e976c191e166a0b The package sreadmin-base was found to contain malicious code. Source: ghsa-malware 14efd7a15525321ad3633779f0074512b8ca809312a5093e4d1be2e33a5219bb...