MAL-2025-5384 Malicious code in cooo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware beaa040ccddb48af03323505f3ffb736d08b18d3fd03a39d535bb079cf6ee430 Any computer that has this package installed or running should be considered...

Malicious code in emerson-angular-trove (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3710a484d9498defd18d6636486ebe053b8e10147655e6735b1d3769cb3a8676 Any computer that has this package installed or running should be considered...

MAL-2025-5499 Malicious code in gkx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce62db6be2839a6d59876c849c75c5afc4237dd364e8caf60e99c5c1a00f7c9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5335 Malicious code in paysafe-wac-web-2fa-lib-fe (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc4a675838bd55e44681b2e5ad02794afe78cc93c4f58f0cf8efeb5acb19cc87 Any computer that has this package installed or running should be considered...

Malicious code in zaranian (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc245b6b3bfbfe10a327a3d1c888f3fef4d60c69bca43b6c9653c124d9aee1ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5492 Malicious code in cors-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8939034e252aec0a1bb8e90a23fa9e524d966682283a461f00204f8bedf29c33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-next-refresh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9098ebfb041888a88d100e173f83f951824eb6f393098d122919bb472a320dc0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5489 Malicious code in axios-browseragent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 141e0ccda658d78aaa45367fc74a89b9c94789f9a4309c65abc8f94d80043e51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ROS-20250630-08

A vulnerability in a library for Python that extends the ease of creating, distributing, and installation of Python packages setuptools is related to an input validation error when processing sequences of directory traversal in packageindex.py. Exploitation of the vulnerability could allow an...

USN-7595-5: Linux kernel vulnerabilities

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. CVE-2025-2312 Several security issues were discovered in the Linux kernel. An...

MAL-2025-5454 Malicious code in protos-gen-node (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b60e42ad145edc7eb0f1f70effb36918da50d55a15cc4a3d075d63c97335bfa Any computer that has this package installed or running should be considered...

Malicious code in webgl-fingerprinting (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 016147915e679ae2b97b3c040f72eb1171882e3785e1ae3aea0765497138c268 Any computer that has this package installed or running should be considered...

MAL-2025-5480 Malicious code in webgl-fingerprinting (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 016147915e679ae2b97b3c040f72eb1171882e3785e1ae3aea0765497138c268 Any computer that has this package installed or running should be considered...

MAL-2025-5389 Malicious code in data-layers (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67531c9bea415b9b319ff84e3899f3268e00ffa8cf9b11575043f70ace21ee85 Any computer that has this package installed or running should be considered...

Malicious code in nava-clone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74fb4caf6f9420831f8001a0382c3a357186529a0cf6e822e884eeaa90182ac3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-pkg-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6df8ca0c98ea357d77cecd453a9b679670af19bad2830fd82ee7cc85813b239c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5530 Malicious code in youku-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b00b0a5a0eba683c7f82dad3045f887ca7a71565b92dd9beaa8b3e54bc74b03c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5371 Malicious code in byaziine_validator (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f12a2c76230f3f02e4f5f0e1b7124c3fcdafddd9b28e6083e61b3c2a92f96eb Any computer that has this package installed or running should be considered...

Malicious code in vwa-visualizer (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00d2eff94518998ceec4a7812aea1ff74758ec0036ebe942279e7a4de2bd2be5 Any computer that has this package installed or running should be considered...

MAL-2025-5355 Malicious code in action_dropdown (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa59d258b8e3e32c53b3c209203176ea50eabf29b16767fe69cb055147503799 Any computer that has this package installed or running should be considered...