MAL-2025-4380 Malicious code in netvis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04b921a82c7652ecfa82429752f76f02da25cbe654921c9b8575e2b6cfe683c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4315 Malicious code in codeword (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2aaf95d3c6934f346d9582d701dca64e259a66b0f2e42ed55c8c2b7096bf7af0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4404 Malicious code in sps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b57efa39f87821ab7b20f816cc7f9581c2e826b864eb91162d8098419b5e4a39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4395 Malicious code in refreshrewards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a85c789c3376d220a18e3a4822d1d6b1b347866ec2f7306a35d970a6a6d3c0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4351 Malicious code in garena-react-template-redux (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d59bac5979a72479c1bacdf22d89116f9a1885cc09f00ca01e3717741e177c65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4368 Malicious code in kyutai-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6eef195dd7dc3e7a30a2bbebaa32b71e36fd4e6a7ad2a7d67ee776953ca7faa3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4413 Malicious code in url-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8a74e201fe0f57bea3516ddf0b2117217189749e17a77ef5219bf7df33abe79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4369 Malicious code in lcs-sistic-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b05382a541057365227516e05e0fe3aeec00d7087f6bfebae88ad20ac12209aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4293 Malicious code in @demoability/loadgen-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77bc624f36bdc284db27e9759ccf30fab22108a753042ccbd6a575fc26f90b79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4316 Malicious code in com.unity.build-report-inspector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0616202469978d5a678e2f752b7f1d3d5c0b99ed091554d11c9f66ca32bca38d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2020-0733

An elevation of privilege vulnerability exists when the Windows Malicious Software Removal Tool MSRT improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Malicious Software Removal Tool Elevation of Privilege...

MAL-2025-4283 Malicious code in random-dupa-test-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99f5f604116e448aa422338fa8d271809af42a57332bbff2963599c372b0ab01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4278 Malicious code in node-facebook-messenger-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38fe2abbba605a3d0f5ab5869e1dc17d20562f1702817cf1c23057e9b3681dfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4282 Malicious code in pumptoolforvolumeandcomment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79449c55ca87bbd552651efe9b6e31f77902a2714c4e0fdf0717dcbbb32f7070 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4276 Malicious code in debugdogs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41181b869f2a857e454633ce56a380dccb2eec0f82c1e0c7186d85c28932ac38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4281 Malicious code in node-telegram-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5b37fa136531c0a67cc2376f7806ed7815076d3947395b944423d6bce51c94a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4186 Malicious code in node-telegram-bots-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 855eef79389ff9b44946f9ab78bd1c5458c090ebc43c875626786bb46280763a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4280 Malicious code in node-telegram-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72079588d96648ea82b5bb1d6e2001a7d5b38d651e7e2589274433c93ae1eb25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4285 Malicious code in rest-api-orchestrator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e20a9fa0a651580cbe0e418726dea2ca91f1a44a78c7bb29619bcd10bd0e8fbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4284 Malicious code in react-native-scrollpageviewtest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcee80fff21305590dcf04ace763231bdd81fcc2ef72bf8492ed79a60a17cd3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...