MAL-2025-2871 Malicious code in coincheck-test (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2868 Malicious code in coincheck-dev (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2859 Malicious code in bsbexample (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2847 Malicious code in bitrue-dev (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2843 Malicious code in bifinance-internal (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2828 Malicious code in @uniqa/user-account-spec-api (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2827 Malicious code in @uniqa/ubimet-ms (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2756 Malicious code in ecko-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a46943965c7587fa7324d2b2470423dd46497cf100d65a55135a1a3c01ef79c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

BELL-CVE-2023-53021

Bulletin has no description...

BELL-CVE-2023-53023

Bulletin has no description...

BELL-CVE-2023-52942

Bulletin has no description...

BELL-CVE-2023-52984

Bulletin has no description...

BELL-CVE-2023-53026

Bulletin has no description...

BELL-CVE-2023-52996

Bulletin has no description...

BELL-CVE-2023-52940

Bulletin has no description...

BELL-CVE-2023-52932

Bulletin has no description...

MAL-2025-2743 Malicious code in @takamol/qiwa-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8afeca0176de89770761716c5f7c943d66f533995c20d1e3a4ed81f2a51f8f54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-28096

OneNav 1.1.0 is vulnerable to Server-Side Request Forgery SSRF in custom headers...

CVE-2025-28093

ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery SSRF in Email Settings...

CVE-2024-56975

InvoicePlane all versions tested as of December 2024 v.1.6.11 and before contains a remote code execution vulnerability in the uploadfile method of the Upload controller...