MAL-2025-4796 Malicious code in @loybung/dous (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ccf330094f29593a658458ccb3e14e0b3ac191babdc7b94434156acf8275bd5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4805 Malicious code in @loybung/textfont (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36aa7aae9f52d1ffdfc4373795d75aa854663263402260a93cd100509f9a8833 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-5925

creationtimestamp| type| source ---|---|--- 2025-06-10 04:29:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17824...

MAL-2025-4762 Malicious code in react-server-dom-fb (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3de60ce6ee796258f00f8278b01f38d42a0db62601e38791bd2ab9a1b20cbdeb Any computer that has this package installed or running should be considered...

GHSA-JC7G-X28F-3V3H

creationtimestamp| type| source ---|---|--- 2025-06-09 16:56:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17703 2025-06-09 17:04:30+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114654489485948868 2026-01-24 21:30:38+00:00| seen|...

MAL-2025-4771 Malicious code in third-party-dep-b (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 546b33d818c64cc299bceb8f872816f6fad9fe13aa60434b533d5c4602337511 Any computer that has this package installed or running should be considered...

GHSA-CM93-6M2M-CJCV

creationtimestamp| type| source ---|---|--- 2025-06-09 14:01:05+00:00| published-proof-of-concept| Telegram/wBaWWziweQgkSo7QapMU6ZNqlsB8QnkMAlvPkvlPpTVYk 2025-06-09 14:12:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114653812055217388...

CVE-2025-41444

creationtimestamp| type| source ---|---|--- 2025-06-09 12:01:36+00:00| seen| Telegram/bTJ9s6Dm5c98HBwnHhlVxkUI4b7kIVaieHQvre00jyC9A 2025-06-09 12:36:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114653436896870669 2025-06-09 15:17:15+00:00| seen|...

laravel-auth0 SDK Deserialization of Untrusted Data vulnerability

Overview The laravel-auth0 SDK contains a critical vulnerability due to insecure deserialization of cookie data. If exploited, since SDKs process cookie content without prior authentication, a threat actor could send a specially crafted cookie containing malicious serialized data. Am I Affected?...

GHSA-JJM2-4HF7-9X65

creationtimestamp| type| source ---|---|--- 2025-06-04 20:41:55+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114627032781451562...

GHSA-8CJ5-5RVV-WF4V

creationtimestamp| type| source ---|---|--- 2025-06-02 20:00:25+00:00| published-proof-of-concept| Telegram/M9ruxIqfssiRmufIiVDPBVG9309mAKgr9KyLQBBOZAkMKU...

CVE-2024-1440

creationtimestamp| type| source ---|---|--- 2025-06-02 17:41:54+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqnd3xo5yzd2...

GHSA-JVVH-FP57-2P32

creationtimestamp| type| source ---|---|--- 2025-06-02 12:01:30+00:00| published-proof-of-concept| Telegram/rXYL1lXWkEU6X4s-B12vmJDiUkp3J5RpkWN8Rf8Wlc0XZWI...

MAL-2025-4616 Malicious code in consumerweb-captcha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7cee9c3e993b7ea96db267f4f869102dd00139de3ea743914d0273ef165a99a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-93M4-MFPG-C3XF

creationtimestamp| type| source ---|---|--- 2025-05-30 12:15:03+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114596728193306173...

GHSA-HQJF-GJ2Q-64CH vulnerabilities

Vulnerabilities for packages: chromium...

MINI-PP3R-5MH8-F5MG

Bulletin has no description...

MINI-JJ63-C5J8-2FQV

Bulletin has no description...

MINI-G7WQ-G6JR-F2HW

Bulletin has no description...

MAL-2025-4588 Malicious code in pancake_uniswap_validators_utils_snipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 791d7ac8f5692ffcb4db92ed0986a9f6c422640fbbe19c1522dbbc0f813aaeb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...