MAL-2025-1421 Malicious code in kcex-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ce9b582a4e9a1941b68d4f5d683d97c93a4bda05b8d494dc0bac426302aa4f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1453 Malicious code in yizhifabao59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5dbe805e6d76dac9bacdd03a8404a4b9f868d77ceee1f73c59eeb698092b5768 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1378 Malicious code in solana-web3.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae0ba85746959ae8f7ae3dc7a934de9e4cb299669dbb270322fa2d8871fd8326 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1369 Malicious code in node-tg-bot-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7691b80bd73d248d18ca3ab676ebf09d22c6e9702f8e80ec44aa70b3ce3ec020 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2020-2944

Vulnerability in the Oracle Solaris product of Oracle Systems component: Common Desktop Environment. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise...

CVE-2024-4325

A Server-Side Request Forgery SSRF vulnerability exists in the gradio-app/gradio version 4.21.0, specifically within the /queue/join endpoint and the saveurltocache function. The vulnerability arises when the path value, obtained from the user and expected to be a URL, is used to make an HTTP...

CVE-2025-23059 Sensitive Information Disclosure in HPE Aruba Networking ClearPass Policy Manager

A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager exposes directories containing sensitive information. If exploited successfully, this vulnerability allows an authenticated remote attacker with high privileges to access and retrieve sensitive...

MAL-2025-1173 Malicious code in sample-nodejs-vsk-with-adm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 268548cd4032a80297c2f7fd9c2e1171027f9ecf4fabcb35debfb7c1fbc0cc13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1134 Malicious code in images.pages.dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 298bd92325308b96679afb4dab0afe1faeded22ac6714ac9b1a9bf0df3e6119a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1190 Malicious code in uniform-reliable-broadcast (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afe9568c85f8e817c897273eb451cab4dd90bc9c875a6dce59229829d7c6f390 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tree-sitter-hcl (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 895fc4f8ca15729033448c2a72536b4599d5bfb9fa83bf42bec01c2e4e4fae88 Any computer that has this package installed or running should be considered...

MAL-2025-287 Malicious code in composite-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb0895cfef58bc04374e30ca74fe5937d86332f548841883b7903c9cd2053af0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-234 Malicious code in prombox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 747f8685d1b7d0c61cf37084a157de813f48b43979c3089b52027da3ace3dbe2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-215 Malicious code in percy-cake-electron-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84391faa58dbd8fba6583b300874c0f4eeb13fef558586ce912dc3b8d9ba314a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-169 Malicious code in braze-web-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5e81df6fadd36a9f51f5daab0483c919db2c42225a2e96eb0bf40c01be8eb16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-264 Malicious code in zk-settlement-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc5c0e7114cd5103b7bbb1048043f0f28d424474ea5070f1024ffcda2f8309f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fider (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e33a8112ebd5139a50734b023e3b935048b314e8fd783e73722625dd79241c69 Any computer that has this package install...

CVE-2023-7005 CVE-2023-7005

A specially crafted message can be sent to the TTLock App that downgrades the encryption protocol used for communication, and can be utilized to compromise the lock, such as through revealing the unlockKey field...

MAL-2024-11981 Malicious code in gatsby-plugin-guru-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 912f6f1165eb394f25eeb94476e000407a49ad251e6c6fbd9abb3c42130a9b8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12033 Malicious code in reftest-helper-for-ae1x (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4986452b8d061de29b89d8be274994d511793fec0bc761b833f96dd3ce7563c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...