MAL-2025-2570 Malicious code in cmft-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7480b4348d595d2f3e0c25957e99041d6301f7e51593c0334345c1cdfe2a080c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2472 Malicious code in ramp-tax-info-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0679be505671452e55b48549ce4c786016851ea54330a9bad829775f5c786c1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2377 Malicious code in dingpengtest-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 325da1087c6b9a78d54fd2d9d92270a587831c91eda6e1620e828bd0a9eea080 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2358 Malicious code in airbnb-jitney-schemas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d76706b4f731a72f676dcad6dd407e8944420bf6d13444362341eceb7adbac2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2410 Malicious code in request-draft-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e20e7c9b27e44bc6a2f406fc1638d5949e6a8ff79801714031432723b004872d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Distros Unpatched Vulnerability : CVE-2024-50301

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - security/keys: fix slab-out-of-bounds in keytaskpermission KASAN reports an out of bounds read: BUG: KASAN: slab-out-of-bounds in kuidval...

MAL-2025-2192 Malicious code in swerve-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6b1194d6641e2147013bfade0bd7f7e18dec7eb509797c7d004c43e2886e02d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Distros Unpatched Vulnerability : CVE-2022-49256

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: watchqueue: Actually free the watch freewatch does everything barring actually freeing the...

MAL-2025-1940 Malicious code in stripe-sample-accept-a-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e04df90b1271528e15250574cc47ddead22c380a340572cb7ac29550a1c69a2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2048 Malicious code in safe-settings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c3d915aeed7d9c3e993a54045d2f8dda26ca9a1632b641f65553f3fc796074c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1590 Malicious code in financial-assistant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46f4bf26e98d1be14ad1a5014b165a3fea5ad540b4f8b496837b595c90496024 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1599 Malicious code in interchain-attestation-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62cc6bf711c9a215813941fee025df8878d105a26cff9eaf31791d55a0b4410d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Craft CMS Code Injection Vulnerability

Craft CMS contains a code injection vulnerability caused by improper validation of the database backup path, ultimately enabling remote code execution...

MAL-2025-1200 Malicious code in worldcoin-grants-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f434639d184713c5d345b9503077d108e6700344719b5e4825d684743661e01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1184 Malicious code in truelayer-for-woocommerce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b29c75990176d19762517dd4d6e52e6c8b1f434a2089b4bfc95fca56e7cd0a3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Remote Code Execution (RCE)

craftcms/cms is vulnerable to Remote Code Execution RCE. The vulnerability is due to compromised security keys, which allow attackers to execute arbitrary code on affected installations...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20066)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20066 advisory. - NFSD: Limit the number of concurrent async COPY operations Chuck Lever Orabug: 37516381 CVE-2024-49974 - NFSD: Async COPY result needs to return...

MAL-2025-364 Malicious code in solc-0.6.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c99978d8a7731b6066088030bd9e8d6f94156c1fe574f1e7490dd1e2913101a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-231 Malicious code in prem-video-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98f8700f52463b240e5e69dc9d6c5f8da58fcfb2f7ade307ba971814a2f6bbb2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-261 Malicious code in woocommerce-gateway-plisio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb8f3b92cdf30ceeaf608dbfa89b7f445770f3e296b7f54fc5bec265e52ef5cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...